CVE-2013-5022

Absolute path traversal vulnerability in the 3D Graph ActiveX control in cw3dgrph.ocx in National Instruments LabWindows/CVI 2012 SP1 and earlier, LabVIEW 2012 SP1 and earlier, and other products allows remote attackers to create and execute arbitrary files via a full pathname in an argument to the ExportStyle method, in conjunction with file content in the (1) Caption or (2) FormatString property value.

• CWE-22

• http://digital.ni.com/public.nsf/allkb/782E4F31442D833186257BD3004AEB47?OpenDocument
• http://digital.ni.com/public.nsf/websearch/507DEC9DA57A708186257B3600512623?OpenDocumentPatch, Vendor Advisory
• http://digital.ni.com/public.nsf/websearch/C4619A438F7E78E486257B360050BD7D?OpenDocumentVendor Advisory
• http://digital.ni.com/public.nsf/allkb/782E4F31442D833186257BD3004AEB47?OpenDocument
• http://digital.ni.com/public.nsf/websearch/507DEC9DA57A708186257B3600512623?OpenDocumentPatch, Vendor Advisory
• http://digital.ni.com/public.nsf/websearch/C4619A438F7E78E486257B360050BD7D?OpenDocumentVendor Advisory

Published

Aug 6, 2013

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-5016Symantec Critical System Protection (SCSP) before 5.2.9, whe…
• CVE-2013-5017SNMPConfig.php in the management console in Symantec Web Gat…
• CVE-2013-5018The is_asn1 function in strongSwan 4.1.11 through 5.0.4 does…
• CVE-2013-5019Stack-based buffer overflow in Ultra Mini HTTPD 1.21 allows …
• CVE-2013-5020Multiple cross-site scripting (XSS) vulnerabilities in bb_ad…
• CVE-2013-5021Multiple absolute path traversal vulnerabilities in National…
• CVE-2013-5023The ActiveX controls in the HelpAsst component in NI Help Li…
• CVE-2013-5024An ActiveX control in NationalInstruments.Help2.dll in Natio…
• CVE-2013-5025An ActiveX control in exlauncher.dll in the Help subsystem i…
• CVE-2013-5026An ActiveX control in lookout650.ocx, lookout660.ocx, and lo…
• CVE-2013-5027Collabtive 1.0 has incorrect access control9.8
• CVE-2013-5028SQL injection vulnerability in IT/hardware-list.dll in Kwoks…