Unscored severity · published Nov 17, 2012
CVE-2012-5897
The (1) SimpleTree and (2) ReportTree classes in the ARDoc ActiveX control (ARDoc.dll) in Quest InTrust 10.4.0.853 and earlier do not properly implement the SaveToFile method,…
–
CVSS
3.8%
EPSS
No
On KEV
Description
The (1) SimpleTree and (2) ReportTree classes in the ARDoc ActiveX control (ARDoc.dll) in Quest InTrust 10.4.0.853 and earlier do not properly implement the SaveToFile method, which allows remote attackers to write or overwrite arbitrary files via the bstrFileName argument.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.8% · higher than 90% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IN
Intrust · Quest
through 10.4.0.853; 10.1; 10.2.5; 10.3; 10.4 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-5897
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-5897
Exploit
http://archives.neohapsis.com/archives/bugtraq/2012-03/0155.html
osvdb.org
http://osvdb.org/80664
Vendor Advisory
http://secunia.com/advisories/48566
Exploit
http://www.exploit-db.com/exploits/18672
Exploit
http://www.securityfocus.com/bid/52773
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/74442
More from Intrust
–
CVE-2012-5896
The Annotation Objects Extension ActiveX control in AnnotateX.dll in Quest InTrust 10.4.0.853 and earlier does not properly implement the Add method, which allows remote attackers…