PT-2012-3158 · Microsoft · Internet Explorer

Moca · Publicado 2012-04-16 · Atualizado 2017-12-29 · CVE-2012-1241

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions ActiveScriptRuby (ASR) version 1.8.7 and earlier, specifically with GRScript18.dll before 1.2.2.0

Description The issue allows remote attackers to execute arbitrary Ruby code via a crafted HTML document, due to improper restriction of interaction with an Internet Explorer ActiveX environment.

Recommendations For ActiveScriptRuby (ASR) version 1.8.7 and earlier, update GRScript18.dll to version 1.2.2.0 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2012-1241

Produtos afetados

Internet Explorer

Referências · 7

• http://securityfocus.com/bid/53011 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/74866 · Nota
• http://secunia.com/advisories/48811 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-1241 · Nota de Segurança
• http://jvn.jp/en/jp/JVN33283707/index.html · Nota
• http://blade.nagaokaut.ac.jp/cgi-bin/scat.rb/ruby/ruby-list/47170 · Nota
• http://jvndb.jvn.jp/jvndb/JVNDB-2012-000031 · Nota