VULNERABILITY INTELLIGENCE
CVE-2011-5289
CVSS score6.4 MEDIUM
EPSS probability2.25%
CISA KEVNot currently listed
Published2015-01-01
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:P/A:P
Description
The SaveDecrypted method in the ChilkatCrypt2.ChilkatOmaDrm.1 ActiveX control in ChilkatCrypt2.dll in aTube Catcher 2.3.570 allows remote attackers to write to arbitrary files via a pathname in the argument.
Primary references
- cve@mitre.org — Exploit
- af854a3a-2127-422b-91ae-364da2661108 — Exploit