GRScript18.dll before 1.2.2.0 in ActiveScriptRuby (ASR) before 1.8.7 does not properly restrict interaction with an Internet Explorer ActiveX environment, which allows remote attackers to execute arbitrary Ruby code via a crafted HTML document.
References
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2012-04-16 16:55
Updated : 2017-12-29 02:29
NVD link : CVE-2012-1241
Mitre link : CVE-2012-1241
CVE.ORG link : CVE-2012-1241
JSON object : View
Products Affected
artonx.org
- activescriptruby
CWE
CWE-264
Permissions, Privileges, and Access Controls