Vulnerability in Ashampoo Gmbh \& Co. 3d Cad Professional 3
CVE-2011-5291
The SaveData method in the Cygnicon.ViewControl.1 ActiveX control in CyViewer.ocx in Ashampoo 3D CAD Professional 3.x before 3.0.2 allows remote attackers to write to arbitrary files via a pathname in the first argument.
EPSS: 0.012 (65.8th percentile) — read the EPSS interpretation.
Affected products
- Ashampoo_gmbh_\&_co. Ashampoo_3d_cad_professional_3 — versions 3.0, 3.0.1
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (Exploit, x_refsource_MISC)