ThreeDify Designer ActiveX Control 'cmdSave()' Insecure Method Vulnerability

Bugtraq ID:	49020
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Aug 04 2011 12:00AM
Updated:	Aug 04 2011 12:00AM
Credit:	High-Tech Bridge SA
Vulnerable:	ThreeDify ThreeDify Designer 5.0.2
Not Vulnerable:

ThreeDify Designer ActiveX Control 'cmdSave()' Insecure Method Vulnerability

ThreeDify Designer ActiveX control ('ActiveSolid.dll') is prone to a vulnerability caused by an insecure method.

Successfully exploiting this issue will allow attackers to create or overwrite files within the context of the affected application (typically Internet Explorer) that uses the ActiveX control. Attackers may be able to execute arbitrary code with user-level privileges.

ThreeDify Designer 5.0.2 is vulnerable; prior versions may also be affected.

ThreeDify Designer ActiveX Control 'cmdSave()' Insecure Method Vulnerability

To exploit this issue, an attacker must entice an unsuspecting user to view a maliciously crafted Web page.

The following exploit code is available:

• /data/vulnerabilities/exploits/49020.html

ThreeDify Designer ActiveX Control 'cmdSave()' Insecure Method Vulnerability

Solution:
Updates are available. Please contact the vendor for more information.

ThreeDify Designer ActiveX Control 'cmdSave()' Insecure Method Vulnerability

References:

• ThreeDify Designer (ThreeDify)
  
• ThreeDify Designer ActiveX control Insecure Method (High-Tech Bridge SA)
  
• ThreeDify Homepage (ThreeDify)
  
• ThreeDify Designer ActiveX control Insecure Method (High-Tech Bridge SA)