CVE-2007-3983

CVE-2007-3983 describes an absolute path traversal vulnerability in the Data Dynamics DDActiveReports2.ActiveReport.2 (ActiveReports) ActiveX control contained in arpro2.dll, part of ActiveReports 2.0 Professional Edition 2.5.0.1308 (SP5 RC). The flaw allows a remote attacker to create or overwri...

CVE-2008-5089

CVE-2008-5089 describes multiple insecure method vulnerabilities in the DDActiveReportsViewer2.ARViewer2 ActiveX control (arview2.ocx) of Data Dynamics ActiveReports 2.5.0.1314 . The underlying issue allows remote attackers to overwrite arbitrary files by calling one of three methods: Pages.Save ...

CVE-2007-3982

The CVE-2007-3982 entry concerns the Data Dynamics ActiveReport (ActiveReports) ActiveX control (actrpt2.dll) version 2.5 and earlier. The vulnerability is an absolute path traversal in which a full pathname passed as the first argument to the SaveLayout method can be used to create or overwrite ...