PT-2012-2437 · Ecava · Integraxor

Published 2012-04-02 · Updated 2018-01-06 · CVE-2012-0246

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Ecava IntegraXor versions prior to 3.71.4200

Description A directory traversal issue exists in an unspecified ActiveX control, allowing remote attackers to execute arbitrary code via vectors involving an HTML document on the server.

Recommendations For versions prior to 3.71.4200, update to version 3.71.4200 or later to resolve the issue.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2012-0246

Affected Products

Integraxor

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2012-0246 · Security Note
• http://osvdb.org/80650 · Note
• http://us-cert.gov/control_systems/pdf/ICSA-12-083-01.pdf · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/74388 · Note
• http://secunia.com/advisories/48558 · Note