Vulnerabilities > CVE-2011-1207 - Incorrect Authorization vulnerability in IBM Rational System Architect

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
ibm
CWE-863
nessus
NVD
Published: 2011-05-05
Updated: 2024-11-21

Summary

The ActiveBar1 ActiveX control in the Data Dynamics ActiveBar ActiveX controls, as distributed in ActBar.ocx 1.0.6.5 in IBM Rational System Architect 11.4.0.2, 11.4.0.1, and earlier, does not properly restrict the SetLayoutData method, which allows remote attackers to execute arbitrary code via a crafted Data argument, a different vulnerability than CVE-2007-3883. NOTE: some of these details are obtained from third party information.

Vulnerable Configurations

Part Description Count
Application
Ibm
8

Common Weakness Enumeration (CWE)

Nessus

  • NASL familyWindows
    NASL idDATA_DYNAMICS_ACTIVEBAR_ACTIVEX.NASL
    descriptionOne or more of the Data Dynamics ActiveBar ActiveX controls installed on the remote Windows host is affected by a code execution vulnerability due to unspecified issues in the
    last seen2020-06-01
    modified2020-06-02
    plugin id54841
    published2011-05-27
    reporterThis script is Copyright (C) 2011-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/54841
    titleData Dynamics ActiveBar ActiveX Controls Code Execution
  • NASL familyWindows
    NASL idSMB_KB_2562937.NASL
    descriptionThe remote Windows host is missing a list of kill bits for ActiveX controls that are known to contain vulnerabilities. If these ActiveX controls are ever installed on the remote host, either now or in the future, they would expose it to various security issues. Note that the affected controls are from third-party vendors that have asked Microsoft to prevent their controls from being run in Internet Explorer.
    last seen2020-06-01
    modified2020-06-02
    plugin id55802
    published2011-08-10
    reporterThis script is Copyright (C) 2011-2018 Tenable Network Security, Inc.
    sourcehttps://www.tenable.com/plugins/nessus/55802
    titleMS 2562937: Update Rollup for ActiveX Kill Bits (2562937)

References