Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

Data Dynamics ActiveReports Actrpt2.DLL ActiveX Control Arbitrary File Overwrite Vulnerability

Data Dynamics ActiveReports ActiveX control is prone to an arbitrary file-overwrite vulnerability due to a design error.

An attacker can exploit this issue to overwrite arbitrary files on the victim's computer in the context of the vulnerable application using the ActiveX control (typically Internet Explorer). Successful exploits will allow attackers to cause denial-of-service conditions; other consequences are possible.

This issue affect Data Dynamics ActiveReports 2.5 and prior versions.







 

Privacy Statement
Copyright 2009, SecurityFocus