CVE-2013-0501

Currently unrated

Key Information:

Vendor
IBM
Status
Cognos Disclosure Management
Vendor
CVE Published:
12 April 2013

Summary

The EdrawSoft EDOFFICE.EDOfficeCtrl.1 ActiveX control, as used in Edraw Office Viewer Component, the client in IBM Cognos Disclosure Management (CDM) 10.2.0, and other products, allows remote attackers to read arbitrary files, or download an arbitrary program onto a client machine and execute this program, via a crafted web site.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/82345
vdb-entryx_refsource_XF
http://www.ibm.com/support/docview.wss?uid=swg21627070
x_refsource_CONFIRM

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.