CVE-2012-3022

TrendLink (Canary Labs) ActiveX control SaveToFile in TrendDisplay.dll is vulnerable in versions up to 9.0.2.27051. The vulnerability allows a remote attacker, via a crafted web site, to create arbitrary files and potentially execute arbitrary code on the client. Public documentation consistently...

CVE-2012-3022

The SaveToFile method in a certain ActiveX control in TrendDisplay.dll in Canary Labs TrendLink 9.0.2.27051 and earlier does not properly restrict the creation of files, which allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via a crafted w...