Lucene search
HistoryOct 03, 2022 - 4:15 p.m.
CVE-2011-5294
cve-2011-5294
nvd
security
vulnerability
leademail
activex
kofax e-transactions sender
ltcml14n dll
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:P/A:P
7 High
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
64.6%
The SaveMessage method in the LEADeMail.LEADSmtp.20 ActiveX control in LTCML14n.dll 14.0.0.34 in Kofax e-Transactions Sender Sendbox 2.5.0.933 allows remote attackers to write to arbitrary files via a pathname in the first argument.
Affected configurations
Node
kofaxkofax_e-transactions_sender_sendboxMatch2.5.0.933
| CPE | Name | Operator | Version |
|---|---|---|---|
| kofax:kofax_e-transactions_sender_sendbox | kofax kofax e-transactions sender sendbox | eq | 2.5.0.933 |
References
Related
nvd
nvd
CVE-2011-5294
2015-01-01 11:59:00
cvelist
cvelist
CVE-2011-5294
2022-10-03 16:15:12
prion
prion
Code injection
2015-01-01 11:59:00
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:P/A:P
7 High
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
64.6%
Related for CVE-2011-5294