CVE-2011-5289: Diego Uscanga Atube Catcher

Medium severity, CVSS 6.4. EPSS: 2.3% chance of exploitation in the next 30 days.

The SaveDecrypted method in the ChilkatCrypt2.ChilkatOmaDrm.1 ActiveX control in ChilkatCrypt2.dll in aTube Catcher 2.3.570 allows remote attackers to write to arbitrary files via a pathname in the argument.

Affected products

• Diego Uscanga Atube Catcher: version 2.3.570 only

Published 2015-01-01. Last modified 2026-06-16.