Vulnerability CVE-2008-5089


Published: 2008-11-14   Modified: 2012-02-13

Description:
Multiple insecure method vulnerabilities in the DDActiveReportsViewer2.ARViewer2 ActiveX control (arview2.ocx) in Data Dynamics ActiveReports 2.5.0.1314 allow remote attackers to overwrite arbitrary files via a call to the (1) Pages.Save, (2) PrintReport, or (3) Canvas.Save method.

Type:

CWE-Other

CVSS2 => (AV:N/AC:M/Au:N/C:C/I:C/A:C)

CVSS Base Score
Impact Subscore
Exploitability Subscore
9.3/10
10/10
8.6/10
Exploit range
Attack complexity
Authentication
Remote
Medium
No required
Confidentiality impact
Integrity impact
Availability impact
Complete
Complete
Complete
Affected software
Datadynamics -> Activereports 

 References:
http://vuln.sg/ddarviewer2501314-en.html
http://www.securityfocus.com/bid/31227
http://www.vupen.com/english/advisories/2008/2612
https://exchange.xforce.ibmcloud.com/vulnerabilities/45219

Copyright 2021, cxsecurity.com

 

Back to Top