CVE

Id
59140  
CVE No.
CVE-2012-5897  
Status
Candidate  
Description
The (1) SimpleTree and (2) ReportTree classees in the ARDoc ActiveX control (ARDoc.dll) in Quest InTrust 10.4.0.853 and earlier do not properly implement the SaveToFile method, which allows remote attackers to write or overwrite arbitrary files via the bstrFileName argument.  
Phase
Assigned (20121117)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
603759 59140 CVE-2012-5897 BUGTRAQ:20120328 Quest InTrust 10.4.x ReportTree and SimpleTree Classes ArDoc.dll ActiveX Control Remote File Creation / Overwrite Vulnerability  View
603760 59140 CVE-2012-5897 URL:http://archives.neohapsis.com/archives/bugtraq/2012-03/0155.html  View
603761 59140 CVE-2012-5897 EXPLOIT-DB:18672  View
603762 59140 CVE-2012-5897 URL:http://www.exploit-db.com/exploits/18672  View
603763 59140 CVE-2012-5897 BID:52773  View
603764 59140 CVE-2012-5897 URL:http://www.securityfocus.com/bid/52773  View
603765 59140 CVE-2012-5897 OSVDB:80664  View
603766 59140 CVE-2012-5897 URL:http://osvdb.org/80664  View
603767 59140 CVE-2012-5897 SECUNIA:48566  View
603768 59140 CVE-2012-5897 URL:http://secunia.com/advisories/48566  View
603769 59140 CVE-2012-5897 XF:intrust-ardoc-file-overwrite(74442)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
29690 JVNDB-2012-005397 DFLabs PTK の ptk/lib/modal_bookmark.php におけるクロスサイトスクリプティングの脆弱性 DFLabs PTK の ptk/lib/modal_bookmark.php には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2012-5902 59140 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005397.html  View