CVE-2012-3022 The SaveToFile method in a certain ActiveX control in TrendDisplay.dll in Canary Labs TrendLink 9.0.2.27051 and earlier does not properly restrict the creation of files, which allows remote attackers....
HighCVSS 8.5
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The SaveToFile method in a certain ActiveX control in TrendDisplay.dll in Canary Labs TrendLink 9.0.2.27051 and earlier does not properly restrict the creation of files, which allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via a crafted web site.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| canarylabs trendlink | <= 9.0.2.27051 | No fix listed |
References
- ics-cert.us-cert.gov us-government-resource