CVE-2011-5294

2015-01-0111:00:00

mitre

www.cve.org

leademail

leadsmtp

activex control

remote file write

ltcml14n.dll

kofax e-transactions sender sendbox 2.5.0.933

AI Score

6.8

Confidence

High

EPSS

0.003

Percentile

72.0%

JSON

The SaveMessage method in the LEADeMail.LEADSmtp.20 ActiveX control in LTCML14n.dll 14.0.0.34 in Kofax e-Transactions Sender Sendbox 2.5.0.933 allows remote attackers to write to arbitrary files via a pathname in the first argument.

References

www.htbridge.com/advisory/HTB23016