Unscored CVE-2012-1241 EUVD-2012-1267GHSA-6938-wq9x-9rgg

GRScript18.dll before 1.2.2.0 in ActiveScriptRuby (ASR) before 1.8.7 does not properly restrict interaction with an Internet Explorer Activ…

Published Apr 16, 2012 · Updated Aug 6, 2024 · Assigned by jpcert

Description

GRScript18.dll before 1.2.2.0 in ActiveScriptRuby (ASR) before 1.8.7 does not properly restrict interaction with an Internet Explorer ActiveX environment, which allows remote attackers to execute arbitrary Ruby code via a crafted HTML document.

References

JVNDB-2012-000031 third-party-advisory
[ruby-list] 20100619 ANN: ActiveScriptRuby 1.8.7 mailing-list
53011 vdb-entry
48811 third-party-advisory
activescriptruby-grscript18-code-exec(74866) vdb-entry
JVN#33283707 third-party-advisory