CVE-2011-5294: Medium severity Kofax Kofax e-Transactions Sender Sendbox vulnerability
Published Jan 1, 2015
·Updated
The SaveMessage method in the LEADeMail.LEADSmtp.20 ActiveX control in LTCML14n.dll 14.0.0.34 in Kofax e-Transactions Sender Sendbox 2.5.0.933 allows remote attackers to write to arbitrary files via a pathname in the first argument.
Affected Software
1 affected component
Kofax Kofax e-Transactions Sender Sendbox=2.5.0.933
Event History
Jan 1, 2015
CVE Published
via MITRE·11:00 AM
Data Sourced
via MITRE·11:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-5294?
CVE-2011-5294 has a medium severity rating due to its potential for remote code execution.
2
How do I fix CVE-2011-5294?
To fix CVE-2011-5294, update Kofax e-Transactions Sender Sendbox to a version that patches this vulnerability.
3
What is the impact of CVE-2011-5294?
CVE-2011-5294 allows remote attackers to write to arbitrary files which could lead to data breaches or system compromise.
4
Which software is affected by CVE-2011-5294?
CVE-2011-5294 affects Kofax e-Transactions Sender Sendbox version 2.5.0.933.
5
Is CVE-2011-5294 actively exploited?
There have been reports of CVE-2011-5294 being exploited in the wild, making it critical to apply patches.