PT-2012-2437 · Ecava · Integraxor

Publicado 2012-04-02 · Atualizado 2018-01-06 · CVE-2012-0246

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Ecava IntegraXor versions prior to 3.71.4200

Description A directory traversal issue exists in an unspecified ActiveX control, allowing remote attackers to execute arbitrary code via vectors involving an HTML document on the server.

Recommendations For versions prior to 3.71.4200, update to version 3.71.4200 or later to resolve the issue.

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2012-0246

Produtos afetados

Integraxor

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2012-0246 · Nota de Segurança
• http://osvdb.org/80650 · Nota
• http://us-cert.gov/control_systems/pdf/ICSA-12-083-01.pdf · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/74388 · Nota
• http://secunia.com/advisories/48558 · Nota