CVEvulnerability
CVE-2012-1241
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2012-04-16
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
GRScript18.dll before 1.2.2.0 in ActiveScriptRuby (ASR) before 1.8.7 does not properly restrict interaction with an Internet Explorer ActiveX environment, which allows remote attackers to execute arbitrary Ruby code via a crafted HTML document.
Affected configurations
• artonx.org activescriptruby (<= 1.0.8.8)
• artonx.org activescriptruby 1.6.0.1
• artonx.org activescriptruby 1.6.0.2
• artonx.org activescriptruby 1.6.0.3
• artonx.org activescriptruby 1.6.0.5
• artonx.org activescriptruby 1.6.2.0
• artonx.org activescriptruby 1.6.2.1
• artonx.org activescriptruby 1.6.2.2
• artonx.org activescriptruby 1.6.2.3
• artonx.org activescriptruby 1.6.2.4
• artonx.org activescriptruby 1.6.2.5
• artonx.org activescriptruby 1.6.2.6
• artonx.org activescriptruby 1.6.2.7
• artonx.org activescriptruby 1.6.2.8
• artonx.org activescriptruby 1.6.2.9
• artonx.org activescriptruby 1.6.2.10
• artonx.org activescriptruby 1.6.3.0
• artonx.org activescriptruby 1.6.3.1
• artonx.org activescriptruby 1.6.3.2
• artonx.org activescriptruby 1.6.3.3
• artonx.org activescriptruby 1.6.3.4
• artonx.org activescriptruby 1.6.3.5
• artonx.org activescriptruby 1.6.4.0
• artonx.org activescriptruby 1.6.4.1
• artonx.org activescriptruby 1.6.4.2
• artonx.org activescriptruby 1.6.4.3
• artonx.org activescriptruby 1.6.4.4
• artonx.org activescriptruby 1.6.4.6
• artonx.org activescriptruby 1.6.4.7
• artonx.org activescriptruby 1.6.4.8
• artonx.org activescriptruby 1.6.5.0
• artonx.org activescriptruby 1.6.5.1
• artonx.org activescriptruby 1.6.5.2
• artonx.org activescriptruby 1.6.5.3
• artonx.org activescriptruby 1.6.5.4
• artonx.org activescriptruby 1.6.5.5
• artonx.org activescriptruby 1.6.5.6
• artonx.org activescriptruby 1.6.5.7
• artonx.org activescriptruby 1.6.6.0
• artonx.org activescriptruby 1.6.6.1
• artonx.org activescriptruby 1.6.7.0
• artonx.org activescriptruby 1.6.7.1
• artonx.org activescriptruby 1.6.7.2
• artonx.org activescriptruby 1.6.7.3
• artonx.org activescriptruby 1.6.7.4
• artonx.org activescriptruby 1.6.7.5
• artonx.org activescriptruby 1.6.7.6
• artonx.org activescriptruby 1.6.8.0
• artonx.org activescriptruby 1.6.8.1
• artonx.org activescriptruby 1.6.8.3
• artonx.org activescriptruby 1.8.0.0
• artonx.org activescriptruby 1.8.0.5
• artonx.org activescriptruby 1.8.1.0
• artonx.org activescriptruby 1.8.1.1
• artonx.org activescriptruby 1.8.1.2
• artonx.org activescriptruby 1.8.2.0
• artonx.org activescriptruby 1.8.4.0
• artonx.org activescriptruby 1.8.5.0
• artonx.org activescriptruby 1.8.5.2
• artonx.org activescriptruby 1.8.7.34
… and 2 more
Related
Weakness · not in database (1)
References
- http://blade.nagaokaut.ac.jp/cgi-bin/scat.rb/ruby/ruby-list/47170 blade.nagaokaut.ac.jp
- http://jvn.jp/en/jp/JVN33283707/index.html jvn.jp
- http://jvndb.jvn.jp/jvndb/JVNDB-2012-000031 jvndb.jvn.jp
- http://secunia.com/advisories/48811 secunia.com
- http://www.securityfocus.com/bid/53011 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/74866 exchange.xforce.ibmcloud.com
- http://blade.nagaokaut.ac.jp/cgi-bin/scat.rb/ruby/ruby-list/47170 blade.nagaokaut.ac.jp
- http://jvn.jp/en/jp/JVN33283707/index.html jvn.jp
- http://jvndb.jvn.jp/jvndb/JVNDB-2012-000031 jvndb.jvn.jp
- http://secunia.com/advisories/48811 secunia.com
- http://www.securityfocus.com/bid/53011 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/74866 exchange.xforce.ibmcloud.com