Lucene search
HistoryOct 03, 2022 - 4:15 p.m.
CVE-2011-5288
cve
threedifydesigner
buffer overflow
activex control
security vulnerability
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
8 High
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
74.0%
Multiple buffer overflows in the ThreeDify.ThreeDifyDesigner.1 ActiveX control in ActiveSolid.dll in ThreeDify Designer 5.0.2 allow remote attackers to execute arbitrary code via a long argument to the (1) cmdExport, (2) cmdImport, (3) cmdOpen, or (4) cmdSave method.
Affected configurations
Node
threedifythreedify_designerMatch5.0.2
| CPE | Name | Operator | Version |
|---|---|---|---|
| threedify:threedify_designer | threedify threedify designer | eq | 5.0.2 |
References
Related
nvd
nvd
CVE-2011-5288
2015-01-01 02:59:04
prion
prion
Buffer overflow
2015-01-01 02:59:00
cvelist
cvelist
CVE-2011-5288
2022-10-03 16:15:12
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
8 High
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
74.0%
Related for CVE-2011-5288