CVE-2011-5293

High

Published: 01/01/2015(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

The cmdSave method in the ThreeDify.ThreeDifyDesigner.1 ActiveX control in ActiveSolid.dll version 5.0.2 allows remote attackers to write to arbitrary files via a pathname in the argument.

Risk Assessment

An attacker could exploit this vulnerability to modify or delete critical files on the server, potentially leading to data loss or system integrity issues.

Recommendation

It is recommended to update to the latest version of ThreeDify Designer and restrict access to the ActiveX control to trusted users.

Other vulnerabilities in ThreeDify Designer 5.0.2

CVE-2011-5288High
Multiple buffer overflows in the ThreeDify.ThreeDifyDesigner.1 ActiveX control in ActiveSolid.dll in version 5.0.2 allow remote attackers to execute arbitrary code via a long argument to the (1) cmdExport, (2) cmdImport, (3) cmdOpen, or (4) cmdSave method.

Original NVD description (English source)

The cmdSave method in the ThreeDify.ThreeDifyDesigner.1 ActiveX control in ActiveSolid.dll in ThreeDify Designer 5.0.2 allows remote attackers to write to arbitrary files via a pathname in the argument.