CVE-2011-1207

2022-10-0316:15:10

CWE-863

[email protected]

web.nvd.nist.gov

cve

activebar1

activex control

ibm rational system architect

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.4 High

AI Score

Confidence

Low

0.135 Low

EPSS

Percentile

95.6%

JSON

The ActiveBar1 ActiveX control in the Data Dynamics ActiveBar ActiveX controls, as distributed in ActBar.ocx 1.0.6.5 in IBM Rational System Architect 11.4.0.2, 11.4.0.1, and earlier, does not properly restrict the SetLayoutData method, which allows remote attackers to execute arbitrary code via a crafted Data argument, a different vulnerability than CVE-2007-3883. NOTE: some of these details are obtained from third party information.

Affected configurations

NVD

Node

ibmrational_system_architectRange≤11.4.0.2

ibmrational_system_architectMatch11.3

ibmrational_system_architectMatch11.3.1

ibmrational_system_architectMatch11.3.1.1

ibmrational_system_architectMatch11.3.1.2

ibmrational_system_architectMatch11.3.1.3

ibmrational_system_architectMatch11.4

ibmrational_system_architectMatch11.4.0.1

CPENameOperatorVersion
ibm:rational_system_architectibm rational system architectle11.4.0.2
ibm:rational_system_architectibm rational system architecteq11.3
ibm:rational_system_architectibm rational system architecteq11.3.1
ibm:rational_system_architectibm rational system architecteq11.3.1.1
ibm:rational_system_architectibm rational system architecteq11.3.1.2
ibm:rational_system_architectibm rational system architecteq11.3.1.3
ibm:rational_system_architectibm rational system architecteq11.4
ibm:rational_system_architectibm rational system architecteq11.4.0.1

CPE	Name	Operator	Version
ibm:rational_system_architect	ibm rational system architect	le	11.4.0.2
ibm:rational_system_architect	ibm rational system architect	eq	11.3
ibm:rational_system_architect	ibm rational system architect	eq	11.3.1
ibm:rational_system_architect	ibm rational system architect	eq	11.3.1.1
ibm:rational_system_architect	ibm rational system architect	eq	11.3.1.2
ibm:rational_system_architect	ibm rational system architect	eq	11.3.1.3
ibm:rational_system_architect	ibm rational system architect	eq	11.4
ibm:rational_system_architect	ibm rational system architect	eq	11.4.0.1