Lucene search
K

4 matches found

Prion
Prion
added 2012/04/16 4:55 p.m.13 views

Hardcoded credentials

GRScript18.dll before 1.2.2.0 in ActiveScriptRuby ASR before 1.8.7 does not properly restrict interaction with an Internet Explorer ActiveX environment, which allows remote attackers to execute arbitrary Ruby code via a crafted HTML document...

7.5CVSS7.7AI score0.01039EPSS
Exploits1References6Affected Software1
Cvelist
Cvelist
added 2012/04/16 4:0 p.m.10 views

CVE-2012-1241

GRScript18.dll before 1.2.2.0 in ActiveScriptRuby ASR before 1.8.7 does not properly restrict interaction with an Internet Explorer ActiveX environment, which allows remote attackers to execute arbitrary Ruby code via a crafted HTML document...

7.2AI score0.01039EPSS
Exploits1References6
seebug.org
seebug.org
added 2012/04/16 12:0 a.m.20 views

ActiveScriptRuby 'GRScript18.dll' ActiveX控件DLL装载任意代码执行漏洞

Bugtraq ID: 53011 CVE ID:CVE-2012-1241 ActiveScriptRuby用于把Ruby实现到Windows环境中。 ActiveScriptRuby存在一个安全漏洞,允许恶意用户执行任意代码。 GRScript18.dll存在一个错误,可被利用执行任意Ruby命令,构建恶意WEB页,诱使用户解析可触发此漏洞。 0 ActiveScriptRuby 1.8.7.34 厂商解决方案 用户可联系厂商升级到最新版本: http://www.artonx.org/data/asr/ 或通过执行如下命令注销COM服务: regsvr32 /u...

7.5CVSS6.5AI score0.01039EPSS
Exploits1
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2012/04/13 12:0 a.m.22 views

JVN#33283707: ActiveScriptRuby vulnerable to arbitrary Ruby script execution

ActiveScriptRuby is a software to implement Ruby into a Windows environment. ActiveScriptRuby contains a vulnerability where an arbitrary Ruby script may be executed on the web browser that can execute ActiveX controls when HTML is displayed. Impact A remote attacker may be able to obtain...

7.5CVSS6.5AI score0.01039EPSS
Exploits1
Rows per page
Query Builder