Описание
GRScript18.dll before 1.2.2.0 in ActiveScriptRuby (ASR) before 1.8.7 does not properly restrict interaction with an Internet Explorer ActiveX environment, which allows remote attackers to execute arbitrary Ruby code via a crafted HTML document.
Ссылки
Уязвимые конфигурации
Конфигурация 1Версия до 1.0.8.8 (включая)
Одно из
cpe:2.3:a:artonx.org:activescriptruby:*:*:*:*:*:*:*:*
cpe:2.3:a:artonx.org:activescriptruby:1.6.0.1:*:*:*:*:*:*:*
cpe:2.3:a:artonx.org:activescriptruby:1.6.0.2:*:*:*:*:*:*:*
cpe:2.3:a:artonx.org:activescriptruby:1.6.0.3:*:*:*:*:*:*:*
cpe:2.3:a:artonx.org:activescriptruby:1.6.0.5:*:*:*:*:*:*:*
cpe:2.3:a:artonx.org:activescriptruby:1.6.2.0:*:*:*:*:*:*:*
cpe:2.3:a:artonx.org:activescriptruby:1.6.2.1:*:*:*:*:*:*:*
cpe:2.3:a:artonx.org:activescriptruby:1.6.2.2:*:*:*:*:*:*:*
cpe:2.3:a:artonx.org:activescriptruby:1.6.2.3:*:*:*:*:*:*:*
cpe:2.3:a:artonx.org:activescriptruby:1.6.2.4:*:*:*:*:*:*:*
cpe:2.3:a:artonx.org:activescriptruby:1.6.2.5:*:*:*:*:*:*:*
cpe:2.3:a:artonx.org:activescriptruby:1.6.2.6:*:*:*:*:*:*:*
cpe:2.3:a:artonx.org:activescriptruby:1.6.2.7:*:*:*:*:*:*:*
cpe:2.3:a:artonx.org:activescriptruby:1.6.2.8:*:*:*:*:*:*:*
cpe:2.3:a:artonx.org:activescriptruby:1.6.2.9:*:*:*:*:*:*:*
cpe:2.3:a:artonx.org:activescriptruby:1.6.2.10:*:*:*:*:*:*:*
cpe:2.3:a:artonx.org:activescriptruby:1.6.3.0:*:*:*:*:*:*:*
cpe:2.3:a:artonx.org:activescriptruby:1.6.3.1:*:*:*:*:*:*:*
cpe:2.3:a:artonx.org:activescriptruby:1.6.3.2:*:*:*:*:*:*:*
cpe:2.3:a:artonx.org:activescriptruby:1.6.3.3:*:*:*:*:*:*:*
cpe:2.3:a:artonx.org:activescriptruby:1.6.3.4:*:*:*:*:*:*:*
cpe:2.3:a:artonx.org:activescriptruby:1.6.3.5:*:*:*:*:*:*:*
cpe:2.3:a:artonx.org:activescriptruby:1.6.4.0:*:*:*:*:*:*:*
cpe:2.3:a:artonx.org:activescriptruby:1.6.4.1:*:*:*:*:*:*:*
cpe:2.3:a:artonx.org:activescriptruby:1.6.4.2:*:*:*:*:*:*:*
cpe:2.3:a:artonx.org:activescriptruby:1.6.4.3:*:*:*:*:*:*:*
cpe:2.3:a:artonx.org:activescriptruby:1.6.4.4:*:*:*:*:*:*:*
cpe:2.3:a:artonx.org:activescriptruby:1.6.4.6:*:*:*:*:*:*:*
cpe:2.3:a:artonx.org:activescriptruby:1.6.4.7:*:*:*:*:*:*:*
cpe:2.3:a:artonx.org:activescriptruby:1.6.4.8:*:*:*:*:*:*:*
cpe:2.3:a:artonx.org:activescriptruby:1.6.5.0:*:*:*:*:*:*:*
cpe:2.3:a:artonx.org:activescriptruby:1.6.5.1:*:*:*:*:*:*:*
cpe:2.3:a:artonx.org:activescriptruby:1.6.5.2:*:*:*:*:*:*:*
cpe:2.3:a:artonx.org:activescriptruby:1.6.5.3:*:*:*:*:*:*:*
cpe:2.3:a:artonx.org:activescriptruby:1.6.5.4:*:*:*:*:*:*:*
cpe:2.3:a:artonx.org:activescriptruby:1.6.5.5:*:*:*:*:*:*:*
cpe:2.3:a:artonx.org:activescriptruby:1.6.5.6:*:*:*:*:*:*:*
cpe:2.3:a:artonx.org:activescriptruby:1.6.5.7:*:*:*:*:*:*:*
cpe:2.3:a:artonx.org:activescriptruby:1.6.6.0:*:*:*:*:*:*:*
cpe:2.3:a:artonx.org:activescriptruby:1.6.6.1:*:*:*:*:*:*:*
cpe:2.3:a:artonx.org:activescriptruby:1.6.7.0:*:*:*:*:*:*:*
cpe:2.3:a:artonx.org:activescriptruby:1.6.7.1:*:*:*:*:*:*:*
cpe:2.3:a:artonx.org:activescriptruby:1.6.7.2:*:*:*:*:*:*:*
cpe:2.3:a:artonx.org:activescriptruby:1.6.7.3:*:*:*:*:*:*:*
cpe:2.3:a:artonx.org:activescriptruby:1.6.7.4:*:*:*:*:*:*:*
cpe:2.3:a:artonx.org:activescriptruby:1.6.7.5:*:*:*:*:*:*:*
cpe:2.3:a:artonx.org:activescriptruby:1.6.7.6:*:*:*:*:*:*:*
cpe:2.3:a:artonx.org:activescriptruby:1.6.8.0:*:*:*:*:*:*:*
cpe:2.3:a:artonx.org:activescriptruby:1.6.8.1:*:*:*:*:*:*:*
cpe:2.3:a:artonx.org:activescriptruby:1.6.8.3:*:*:*:*:*:*:*
cpe:2.3:a:artonx.org:activescriptruby:1.8.0.0:*:*:*:*:*:*:*
cpe:2.3:a:artonx.org:activescriptruby:1.8.0.5:*:*:*:*:*:*:*
cpe:2.3:a:artonx.org:activescriptruby:1.8.1.0:*:*:*:*:*:*:*
cpe:2.3:a:artonx.org:activescriptruby:1.8.1.1:*:*:*:*:*:*:*
cpe:2.3:a:artonx.org:activescriptruby:1.8.1.2:*:*:*:*:*:*:*
cpe:2.3:a:artonx.org:activescriptruby:1.8.2.0:*:*:*:*:*:*:*
cpe:2.3:a:artonx.org:activescriptruby:1.8.4.0:*:*:*:*:*:*:*
cpe:2.3:a:artonx.org:activescriptruby:1.8.5.0:*:*:*:*:*:*:*
cpe:2.3:a:artonx.org:activescriptruby:1.8.5.2:*:*:*:*:*:*:*
cpe:2.3:a:artonx.org:activescriptruby:1.8.7.34:*:*:*:*:*:*:*
cpe:2.3:a:artonx.org:activescriptruby:1.8.7.35:*:*:*:*:*:*:*
cpe:2.3:a:artonx.org:activescriptruby:1.8.7.36:*:*:*:*:*:*:*
EPSS
Процентиль: 77%
0.01039
Низкий
7.5 High
CVSS2
Дефекты
CWE-264
Связанные уязвимости
github
больше 3 лет назад
GRScript18.dll before 1.2.2.0 in ActiveScriptRuby (ASR) before 1.8.7 does not properly restrict interaction with an Internet Explorer ActiveX environment, which allows remote attackers to execute arbitrary Ruby code via a crafted HTML document.
EPSS
Процентиль: 77%
0.01039
Низкий
7.5 High
CVSS2
Дефекты
CWE-264