Security Advisory

CVE-2008-5089

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2008-11-14 19:00:00
Last updated 2024-08-07 10:40:17
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Multiple insecure method vulnerabilities in the DDActiveReportsViewer2.ARViewer2 ActiveX control (arview2.ocx) in Data Dynamics ActiveReports 2.5.0.1314 allow remote attackers to overwrite arbitrary files via a call to the (1) Pages.Save, (2) PrintReport, or (3) Canvas.Save method.