CVEvulnerability
CVE-2012-5897
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2012-11-17
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
The (1) SimpleTree and (2) ReportTree classes in the ARDoc ActiveX control (ARDoc.dll) in Quest InTrust 10.4.0.853 and earlier do not properly implement the SaveToFile method, which allows remote attackers to write or overwrite arbitrary files via the bstrFileName argument.
Affected configurations
• quest intrust (<= 10.4.0.853)
• quest intrust 10.1
• quest intrust 10.2.5
• quest intrust 10.3
• quest intrust 10.4
Related
Weakness · not in database (1)
References
- http://archives.neohapsis.com/archives/bugtraq/2012-03/0155.html Exploit
- http://osvdb.org/80664 osvdb.org
- http://secunia.com/advisories/48566 Vendor Advisory
- http://www.exploit-db.com/exploits/18672 Exploit
- http://www.securityfocus.com/bid/52773 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/74442 exchange.xforce.ibmcloud.com
- http://archives.neohapsis.com/archives/bugtraq/2012-03/0155.html Exploit
- http://osvdb.org/80664 osvdb.org
- http://secunia.com/advisories/48566 Vendor Advisory
- http://www.exploit-db.com/exploits/18672 Exploit
- http://www.securityfocus.com/bid/52773 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/74442 exchange.xforce.ibmcloud.com