CVEvulnerability

CVE-2011-5291

6.4 MEDIUM Published 2015-01-01 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2015-01-01
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 6.4 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:P
Weaknesses: CWE-264

Description

The SaveData method in the Cygnicon.ViewControl.1 ActiveX control in CyViewer.ocx in Ashampoo 3D CAD Professional 3.x before 3.0.2 allows remote attackers to write to arbitrary files via a pathname in the first argument.

Affected configurations

• ashampoo gmbh \& co. ashampoo 3d cad professional 3 3.0 • ashampoo gmbh \& co. ashampoo 3d cad professional 3 3.0.1

Weakness · not in database (1)

CWE-264

References

https://www.htbridge.com/advisory/HTB23019 Exploit
https://www.htbridge.com/advisory/HTB23019 Exploit

CVE-2011-5291

Description

Affected configurations

Related

Weakness · not in database (1)

References