Vulnerability in Artonx.org Activescriptruby

CVE-2012-1241

GRScript18.dll before 1.2.2.0 in ActiveScriptRuby (ASR) before 1.8.7 does not properly restrict interaction with an Internet Explorer ActiveX environment, which allows remote attackers to execute arbitrary Ruby code via a crafted HTML document.

EPSS: 0.017 (74.7th percentile) — read the EPSS interpretation.

Affected products

Artonx.org Activescriptruby — versions 1.6.0.1, 1.6.0.2, 1.6.0.3
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

vultures@jpcert.or.jp (x_refsource_JVNDB, third-party-advisory)
vultures@jpcert.or.jp (mailing-list, x_refsource_MLIST)
vultures@jpcert.or.jp (vdb-entry, x_refsource_BID)
vultures@jpcert.or.jp (x_refsource_SECUNIA, third-party-advisory)
vultures@jpcert.or.jp (vdb-entry, x_refsource_XF)
vultures@jpcert.or.jp (x_refsource_JVN, third-party-advisory)