CVE-2011-1207

2011-05-0502:39:46

CWE-863

mitre

web.nvd.nist.gov

cve

activebar1

activex control

ibm rational system architect

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.4

Confidence

Low

EPSS

0.135

Percentile

95.7%

JSON

The ActiveBar1 ActiveX control in the Data Dynamics ActiveBar ActiveX controls, as distributed in ActBar.ocx 1.0.6.5 in IBM Rational System Architect 11.4.0.2, 11.4.0.1, and earlier, does not properly restrict the SetLayoutData method, which allows remote attackers to execute arbitrary code via a crafted Data argument, a different vulnerability than CVE-2007-3883. NOTE: some of these details are obtained from third party information.

Affected configurations

Nvd

Node

ibmrational_system_architectRange≤11.4.0.2

ibmrational_system_architectMatch11.3

ibmrational_system_architectMatch11.3.1

ibmrational_system_architectMatch11.3.1.1

ibmrational_system_architectMatch11.3.1.2

ibmrational_system_architectMatch11.3.1.3

ibmrational_system_architectMatch11.4

ibmrational_system_architectMatch11.4.0.1

VendorProductVersionCPE
ibmrational_system_architect*cpe:2.3:a:ibm:rational_system_architect:*:*:*:*:*:*:*:*
ibmrational_system_architect11.3cpe:2.3:a:ibm:rational_system_architect:11.3:*:*:*:*:*:*:*
ibmrational_system_architect11.3.1cpe:2.3:a:ibm:rational_system_architect:11.3.1:*:*:*:*:*:*:*
ibmrational_system_architect11.3.1.1cpe:2.3:a:ibm:rational_system_architect:11.3.1.1:*:*:*:*:*:*:*
ibmrational_system_architect11.3.1.2cpe:2.3:a:ibm:rational_system_architect:11.3.1.2:*:*:*:*:*:*:*
ibmrational_system_architect11.3.1.3cpe:2.3:a:ibm:rational_system_architect:11.3.1.3:*:*:*:*:*:*:*
ibmrational_system_architect11.4cpe:2.3:a:ibm:rational_system_architect:11.4:*:*:*:*:*:*:*
ibmrational_system_architect11.4.0.1cpe:2.3:a:ibm:rational_system_architect:11.4.0.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	rational_system_architect	*	cpe:2.3:a:ibm:rational_system_architect::::::::
ibm	rational_system_architect	11.3	cpe:2.3:a:ibm:rational_system_architect:11.3:::::::*
ibm	rational_system_architect	11.3.1	cpe:2.3:a:ibm:rational_system_architect:11.3.1:::::::*
ibm	rational_system_architect	11.3.1.1	cpe:2.3:a:ibm:rational_system_architect:11.3.1.1:::::::*
ibm	rational_system_architect	11.3.1.2	cpe:2.3:a:ibm:rational_system_architect:11.3.1.2:::::::*
ibm	rational_system_architect	11.3.1.3	cpe:2.3:a:ibm:rational_system_architect:11.3.1.3:::::::*
ibm	rational_system_architect	11.4	cpe:2.3:a:ibm:rational_system_architect:11.4:::::::*
ibm	rational_system_architect	11.4.0.1	cpe:2.3:a:ibm:rational_system_architect:11.4.0.1:::::::*