CVE-2011-5294
The SaveMessage method in the LEADeMail.LEADSmtp.20 ActiveX control in LTCML14n.dll 14.0.0.34 in Kofax e-Transactions Sender Sendbox 2.5.0.933 allows remote attackers to write to arbitrary files via a pathname in the first argument.
- Score
- CVSS 2.0 6.4 Medium
- Status
- Modified - cve@mitre.org
- Published
- 2015-01-01
- Last modified
- 2024-09-16
- Weaknesses
- CWE-264
Affected products
References
- https://www.htbridge.com/advisory/HTB23016
