Information disclosure

2011-05-0502:39:00

PRIOn knowledge base

www.prio-n.com

7.5 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.022 Low

EPSS

Percentile

89.2%

JSON

The ActiveBar1 ActiveX control in the Data Dynamics ActiveBar ActiveX controls, as distributed in ActBar.ocx 1.0.6.5 in IBM Rational System Architect 11.4.0.2, 11.4.0.1, and earlier, does not properly restrict the SetLayoutData method, which allows remote attackers to execute arbitrary code via a crafted Data argument, a different vulnerability than CVE-2007-3883. NOTE: some of these details are obtained from third party information.

CPENameOperatorVersion
rational_system_architecteq11.3.1.2
rational_system_architecteq11.4
rational_system_architecteq11.3.1.3
rational_system_architecteq11.4.0.1
rational_system_architectle11.4.0.2
rational_system_architecteq11.3
rational_system_architecteq11.3.1.1
rational_system_architecteq11.3.1

Name	Operator	Version
rational_system_architect	eq	11.3.1.2
rational_system_architect	eq	11.4
rational_system_architect	eq	11.3.1.3
rational_system_architect	eq	11.4.0.1
rational_system_architect	le	11.4.0.2
rational_system_architect	eq	11.3
rational_system_architect	eq	11.3.1.1
rational_system_architect	eq	11.3.1