CVEvulnerability
CVE-2012-0246
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2012-04-02
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-22
Description
Directory traversal vulnerability in an unspecified ActiveX control in Ecava IntegraXor before 3.71.4200 allows remote attackers to execute arbitrary code via vectors involving an HTML document on the server.
Affected configurations
• ecava integraxor (<= 3.60.4061)
• ecava integraxor 3.5.3900.5
• ecava integraxor 3.5.3900.10
• ecava integraxor 3.6.4000.0
• ecava integraxor 3.60
Related
Weakness · CWE (1)
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
References
- http://osvdb.org/80650 osvdb.org
- http://secunia.com/advisories/48558 secunia.com
- http://www.us-cert.gov/control_systems/pdf/ICSA-12-083-01.pdf US Government Resource
- https://exchange.xforce.ibmcloud.com/vulnerabilities/74388 exchange.xforce.ibmcloud.com
- http://osvdb.org/80650 osvdb.org
- http://secunia.com/advisories/48558 secunia.com
- http://www.us-cert.gov/control_systems/pdf/ICSA-12-083-01.pdf US Government Resource
- https://exchange.xforce.ibmcloud.com/vulnerabilities/74388 exchange.xforce.ibmcloud.com