NVD

Id
43238  
Name
CVE-2012-1241  
Description
GRScript18.dll before 1.2.2.0 in ActiveScriptRuby (ASR) before 1.8.7 does not properly restrict interaction with an Internet Explorer ActiveX environment, which allows remote attackers to execute arbitrary Ruby code via a crafted HTML document.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-04-16  
Modified Date
2012-04-17  
Seq
2012-1241  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
217667 43238 CVE-2012-1241 [ruby-list] 20100619 ANN: ActiveScriptRuby 1.8.7  View
217668 43238 CVE-2012-1241 JVN#33283707  View
217669 43238 CVE-2012-1241 JVNDB-2012-000031  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
25212 JVNDB-2012-000031 ActiveScriptRuby に HTML 上で任意の Ruby スクリプトを実行可能な脆弱性 ActiveScriptRuby には、ActiveX コントロールを実行可能なウェブブラウザで HTML を表示した際に、任意の Ruby スクリプトが実行可能な脆弱性が存在します。 CVE-2012-1241 54479 CVE-2012-1241 43238 5.8 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-000031.html 2012-04-13 2012-04-13 View