CVE-2008-5089 Multiple insecure method vulnerabilities in the DDActiveReportsViewer2.ARViewer2 ActiveX control (arview2.ocx) in Data Dynamics ActiveReports 2.5.0.1314 allow remote attackers to overwrite arbitrary f...
HighCVSS 9.3
EPSS 2.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple insecure method vulnerabilities in the DDActiveReportsViewer2.ARViewer2 ActiveX control (arview2.ocx) in Data Dynamics ActiveReports 2.5.0.1314 allow remote attackers to overwrite arbitrary files via a call to the (1) Pages.Save, (2) PrintReport, or (3) Canvas.Save method.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| datadynamics activereports | = 2.5.0.1314 | No fix listed |
References
- 31894 third-party-advisory
- vuln.sg
- 31227 vdb-entry
- ADV-2008-2612 vdb-entry
- activereports-arview2-file-overwrite(45219) vdb-entry