Remote File Overwrite Vulnerability in Quest InTrust ActiveX Control
CVE-2012-5897
Currently unrated
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2012-5897?
The ARDoc ActiveX control (ARDoc.dll) in Quest InTrust versions up to 10.4.0.853 contains a vulnerability in its SimpleTree and ReportTree classes. The SaveToFile method is not properly implemented, allowing remote attackers to manipulate the bstrFileName argument. This flaw opens the door for exploitation, permitting attackers to write or overwrite arbitrary files on the affected systems. Such vulnerabilities pose significant security risks, leading to unauthorized data access and potential system compromise.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.