CVE-2008-5089

CRITICO 9.3CVE-2008-5089 · Published 14/11/2008 · updated 16/06/2026

In breve

CVE-2008-5089 è una vulnerabilità CRITICO (CVSS 9.3) che riguarda activereports (datadynamics).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 2.8%, superiore al 86.7% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
activereports datadynamics	`= 2.5.0.1314`	No fix yet

Description

Multiple insecure method vulnerabilities in the DDActiveReportsViewer2.ARViewer2 ActiveX control (arview2.ocx) in Data Dynamics ActiveReports 2.5.0.1314 allow remote attackers to overwrite arbitrary files via a call to the (1) Pages.Save, (2) PrintReport, or (3) Canvas.Save method.

References

secunia.com/advisories/31894
vuln.sg/ddarviewer2501314-en.html
securityfocus.com/bid/31227
vupen.com/english/advisories/2008/2612
exchange.xforce.ibmcloud.com/vulnerabilities/45219

Altre vulnerabilità di activereports

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free