CVE-2013-0501

Currently unrated

Key Information:

Vendor: IBM
Status: Cognos Disclosure Management
Vendor: CVE Published:; 12 April 2013

Summary

The EdrawSoft EDOFFICE.EDOfficeCtrl.1 ActiveX control, as used in Edraw Office Viewer Component, the client in IBM Cognos Disclosure Management (CDM) 10.2.0, and other products, allows remote attackers to read arbitrary files, or download an arbitrary program onto a client machine and execute this program, via a crafted web site.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/82345

vdb-entryx_refsource_XF

http://www.ibm.com/support/docview.wss?uid=swg21627070

x_refsource_CONFIRM

Timeline

Vulnerability published
Apr 12, 2013
Vulnerability Reserved
Dec 16, 2012