CVEvulnerability

CVE-2011-0323

9.3 HIGH Published 2011-02-07 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2011-02-07
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C

Description

Topaz Systems SigPlus Pro ActiveX Control 3.95, and possibly other versions before 4.29, allows remote attackers to execute arbitrary code by calling the exposed unsafe (1) SetLogFilePath and (2) SigMessage methods to create arbitrary files with arbitrary content.

Affected configurations

• topazsystems sigplus pro activex control 3.95

References

http://secunia.com/advisories/42800 Vendor Advisory
http://secunia.com/secunia_research/2011-1/ Vendor Advisory
http://www.securityfocus.com/bid/46128 www.securityfocus.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/65117 exchange.xforce.ibmcloud.com
http://secunia.com/advisories/42800 Vendor Advisory
http://secunia.com/secunia_research/2011-1/ Vendor Advisory
http://www.securityfocus.com/bid/46128 www.securityfocus.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/65117 exchange.xforce.ibmcloud.com