CVE-2011-5288

High

Published: 01/01/2015(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

Multiple buffer overflows in the ThreeDify.ThreeDifyDesigner.1 ActiveX control in ActiveSolid.dll in version 5.0.2 allow remote attackers to execute arbitrary code via a long argument to the (1) cmdExport, (2) cmdImport, (3) cmdOpen, or (4) cmdSave method.

Risk Assessment

Attackers can exploit this vulnerability to execute arbitrary code remotely, potentially leading to system takeover and data leakage.

Recommendation

It is recommended to update to the latest version of ThreeDify Designer to mitigate this vulnerability and restrict access to the ActiveX control.

Other vulnerabilities in ThreeDify Designer 5.0.2

CVE-2011-5293High
The cmdSave method in the ThreeDify.ThreeDifyDesigner.1 ActiveX control in ActiveSolid.dll version 5.0.2 allows remote attackers to write to arbitrary files via a pathname in the argument.

Original NVD description (English source)

Multiple buffer overflows in the ThreeDify.ThreeDifyDesigner.1 ActiveX control in ActiveSolid.dll in ThreeDify Designer 5.0.2 allow remote attackers to execute arbitrary code via a long argument to the (1) cmdExport, (2) cmdImport, (3) cmdOpen, or (4) cmdSave method.