Multiple buffer overflows in the ThreeDify.ThreeDifyDesigner.1 ActiveX control in ActiveSolid.dll in ThreeDify Designer 5.0.2 allow remote attackers to execute arbitrary code via a long argument to the (1) cmdExport, (2) cmdImport, (3) cmdOpen, or (4) cmdSave method.
References
Link | Resource |
---|---|
https://www.htbridge.com/advisory/HTB23020 | Exploit |
Configurations
Information
Published : 2014-12-31 18:59
Updated : 2015-01-02 16:57
NVD link : CVE-2011-5288
Mitre link : CVE-2011-5288
JSON object : View
CWE
CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
Products Affected
threedify
- threedify_designer