PT-2015-3486
CVE-2011-5290
·
تاريخ النشر
2015-01-01
·
تاريخ التحديث
2015-01-03
الوصف من
CVSS 2.0
6.4
متوسطةالمقاييسAV:N/AC:L/Au:N/C:N/I:P/A:P
Name of the Vulnerable Software and Affected Versions
IDrive Online Backup version 3.4.0
Description
The issue concerns the SaveToFile method in the UniBasicPack.UniTextBox ActiveX control, which allows remote attackers to write to arbitrary files by specifying a pathname in the first argument.
Recommendations
For IDrive Online Backup version 3.4.0, consider disabling the SaveToFile method in the UniBasicPack.UniTextBox ActiveX control until a patch is available. Restrict access to this method to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾