CVE-2011-0323

CVE-2011-0323 describes a critical vulnerability in Topaz Systems SigPlus Pro ActiveX Control versions prior to 4.29. This flaw allows remote attackers to execute arbitrary code by exploiting exposed, unsafe methods (SetLogFilePath and SigMessage) to create arbitrary files with attacker-controlled content. With a CVSS score of 9.3, this vulnerability poses a significant risk due to its network-based attack vector, medium attack complexity, and complete compromise of confidentiality, integrity, and availability. Despite its high severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.