CVEvulnerability

CVE-2011-1207

9.3 HIGH Published 2011-05-05 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2011-05-05
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-863

Description

The ActiveBar1 ActiveX control in the Data Dynamics ActiveBar ActiveX controls, as distributed in ActBar.ocx 1.0.6.5 in IBM Rational System Architect 11.4.0.2, 11.4.0.1, and earlier, does not properly restrict the SetLayoutData method, which allows remote attackers to execute arbitrary code via a crafted Data argument, a different vulnerability than CVE-2007-3883. NOTE: some of these details are obtained from third party information.

Affected configurations

• ibm rational system architect (<= 11.4.0.2) • ibm rational system architect 11.3 • ibm rational system architect 11.3.1 • ibm rational system architect 11.3.1.1 • ibm rational system architect 11.3.1.2 • ibm rational system architect 11.3.1.3 • ibm rational system architect 11.4 • ibm rational system architect 11.4.0.1

Related

Weakness · CWE (1)

  • CWE-863 Incorrect Authorization weakness

References