Unscored CVE-2008-5089 EUVD-2008-5068GHSA-7m8h-jh7p-6pqw

Multiple insecure method vulnerabilities in the DDActiveReportsViewer2.ARViewer2 ActiveX control (arview2.ocx) in Data Dynamics ActiveRepor…

Published Nov 14, 2008 · Updated Aug 7, 2024 · Assigned by mitre

Description

Multiple insecure method vulnerabilities in the DDActiveReportsViewer2.ARViewer2 ActiveX control (arview2.ocx) in Data Dynamics ActiveReports 2.5.0.1314 allow remote attackers to overwrite arbitrary files via a call to the (1) Pages.Save, (2) PrintReport, or (3) Canvas.Save method.

References

activereports-arview2-file-overwrite(45219) vdb-entry
http://vuln.sg/ddarviewer2501314-en.html
ADV-2008-2612 vdb-entry
31894 third-party-advisory
31227 vdb-entry