CVE-2012-1241 GRScript18.dll before 1.2.2.0 in ActiveScriptRuby (ASR) before 1.8.7 does not properly restrict interaction with an Internet Explorer ActiveX environment, which allows remote attackers to execute arbi...
HighCVSS 7.5
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
GRScript18.dll before 1.2.2.0 in ActiveScriptRuby (ASR) before 1.8.7 does not properly restrict interaction with an Internet Explorer ActiveX environment, which allows remote attackers to execute arbitrary Ruby code via a crafted HTML document.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| artonx.org activescriptruby | <= 1.0.8.8 | No fix listed |
| artonx.org activescriptruby | = 1.6.0.1 | No fix listed |
| artonx.org activescriptruby | = 1.6.0.2 | No fix listed |
| artonx.org activescriptruby | = 1.6.0.3 | No fix listed |
| artonx.org activescriptruby | = 1.6.0.5 | No fix listed |
| artonx.org activescriptruby | = 1.6.2.0 | No fix listed |
| artonx.org activescriptruby | = 1.6.2.1 | No fix listed |
| artonx.org activescriptruby | = 1.6.2.2 | No fix listed |
| artonx.org activescriptruby | = 1.6.2.3 | No fix listed |
| artonx.org activescriptruby | = 1.6.2.4 | No fix listed |
| artonx.org activescriptruby | = 1.6.2.5 | No fix listed |
| artonx.org activescriptruby | = 1.6.2.6 | No fix listed |
| artonx.org activescriptruby | = 1.6.2.7 | No fix listed |
| artonx.org activescriptruby | = 1.6.2.8 | No fix listed |
| artonx.org activescriptruby | = 1.6.2.9 | No fix listed |
| artonx.org activescriptruby | = 1.6.2.10 | No fix listed |
| artonx.org activescriptruby | = 1.6.3.0 | No fix listed |
| artonx.org activescriptruby | = 1.6.3.1 | No fix listed |
| artonx.org activescriptruby | = 1.6.3.2 | No fix listed |
| artonx.org activescriptruby | = 1.6.3.3 | No fix listed |
| artonx.org activescriptruby | = 1.6.3.4 | No fix listed |
| artonx.org activescriptruby | = 1.6.3.5 | No fix listed |
| artonx.org activescriptruby | = 1.6.4.0 | No fix listed |
| artonx.org activescriptruby | = 1.6.4.1 | No fix listed |
| artonx.org activescriptruby | = 1.6.4.2 | No fix listed |
Show 37 more
| Product | Affected versions | Fixed in |
|---|---|---|
| artonx.org activescriptruby | = 1.6.4.3 | No fix listed |
| artonx.org activescriptruby | = 1.6.4.4 | No fix listed |
| artonx.org activescriptruby | = 1.6.4.6 | No fix listed |
| artonx.org activescriptruby | = 1.6.4.7 | No fix listed |
| artonx.org activescriptruby | = 1.6.4.8 | No fix listed |
| artonx.org activescriptruby | = 1.6.5.0 | No fix listed |
| artonx.org activescriptruby | = 1.6.5.1 | No fix listed |
| artonx.org activescriptruby | = 1.6.5.2 | No fix listed |
| artonx.org activescriptruby | = 1.6.5.3 | No fix listed |
| artonx.org activescriptruby | = 1.6.5.4 | No fix listed |
| artonx.org activescriptruby | = 1.6.5.5 | No fix listed |
| artonx.org activescriptruby | = 1.6.5.6 | No fix listed |
| artonx.org activescriptruby | = 1.6.5.7 | No fix listed |
| artonx.org activescriptruby | = 1.6.6.0 | No fix listed |
| artonx.org activescriptruby | = 1.6.6.1 | No fix listed |
| artonx.org activescriptruby | = 1.6.7.0 | No fix listed |
| artonx.org activescriptruby | = 1.6.7.1 | No fix listed |
| artonx.org activescriptruby | = 1.6.7.2 | No fix listed |
| artonx.org activescriptruby | = 1.6.7.3 | No fix listed |
| artonx.org activescriptruby | = 1.6.7.4 | No fix listed |
| artonx.org activescriptruby | = 1.6.7.5 | No fix listed |
| artonx.org activescriptruby | = 1.6.7.6 | No fix listed |
| artonx.org activescriptruby | = 1.6.8.0 | No fix listed |
| artonx.org activescriptruby | = 1.6.8.1 | No fix listed |
| artonx.org activescriptruby | = 1.6.8.3 | No fix listed |
| artonx.org activescriptruby | = 1.8.0.0 | No fix listed |
| artonx.org activescriptruby | = 1.8.0.5 | No fix listed |
| artonx.org activescriptruby | = 1.8.1.0 | No fix listed |
| artonx.org activescriptruby | = 1.8.1.1 | No fix listed |
| artonx.org activescriptruby | = 1.8.1.2 | No fix listed |
| artonx.org activescriptruby | = 1.8.2.0 | No fix listed |
| artonx.org activescriptruby | = 1.8.4.0 | No fix listed |
| artonx.org activescriptruby | = 1.8.5.0 | No fix listed |
| artonx.org activescriptruby | = 1.8.5.2 | No fix listed |
| artonx.org activescriptruby | = 1.8.7.34 | No fix listed |
| artonx.org activescriptruby | = 1.8.7.35 | No fix listed |
| artonx.org activescriptruby | = 1.8.7.36 | No fix listed |
References
- [ruby-list] 20100619 ANN: ActiveScriptRuby 1.8.7 mailing-list
- JVN#33283707 third-party-advisory
- JVNDB-2012-000031 third-party-advisory
- 48811 third-party-advisory
- 53011 vdb-entry
- activescriptruby-grscript18-code-exec(74866) vdb-entry