CVEvulnerability
CVE-2013-0501
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2013-04-12
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
The EdrawSoft EDOFFICE.EDOfficeCtrl.1 ActiveX control, as used in Edraw Office Viewer Component, the client in IBM Cognos Disclosure Management (CDM) 10.2.0, and other products, allows remote attackers to read arbitrary files, or download an arbitrary program onto a client machine and execute this program, via a crafted web site.
Affected configurations
• ibm cognos disclosure management 10.2.0
Related
Weakness · not in database (1)
References
- http://www.ibm.com/support/docview.wss?uid=swg21627070 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/82345 exchange.xforce.ibmcloud.com
- http://www.ibm.com/support/docview.wss?uid=swg21627070 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/82345 exchange.xforce.ibmcloud.com