VULNERABILITY INTELLIGENCE

CVE-2008-5089

CVSS score9.3 HIGH
EPSS probability2.83%
CISA KEVNot currently listed
Published2008-11-14
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C

Description

Multiple insecure method vulnerabilities in the DDActiveReportsViewer2.ARViewer2 ActiveX control (arview2.ocx) in Data Dynamics ActiveReports 2.5.0.1314 allow remote attackers to overwrite arbitrary files via a call to the (1) Pages.Save, (2) PrintReport, or (3) Canvas.Save method.

Primary references