Code injection

The SaveMessage method in the LEADeMail.LEADSmtp.20 ActiveX control in LTCML14n.dll 14.0.0.34 in Kofax e-Transactions Sender Sendbox 2.5.0.933 allows remote attackers to write to arbitrary files via a pathname in the first argument...

PT-2015-3490

Name of the Vulnerable Software and Affected Versions Kofax e-Transactions Sender Sendbox version 2.5.0.933 Description The issue allows remote attackers to write to arbitrary files via a pathname in the first argument of the SaveMessage method in the LEADeMail.LEADSmtp.20 ActiveX control...