Unrated severityNVD Advisory· Published Nov 17, 2012· Updated Apr 29, 2026

CVE-2012-5897

Description

The (1) SimpleTree and (2) ReportTree classes in the ARDoc ActiveX control (ARDoc.dll) in Quest InTrust 10.4.0.853 and earlier do not properly implement the SaveToFile method, which allows remote attackers to write or overwrite arbitrary files via the bstrFileName argument.

Affected products

Quest/Intrust5 versions
cpe:2.3:a:quest:intrust:*:*:*:*:*:*:*:*+ 4 more
- cpe:2.3:a:quest:intrust:*:*:*:*:*:*:*:*range: <=10.4.0.853
- cpe:2.3:a:quest:intrust:10.1:*:*:*:*:*:*:*
- cpe:2.3:a:quest:intrust:10.2.5:*:*:*:*:*:*:*
- cpe:2.3:a:quest:intrust:10.3:*:*:*:*:*:*:*
- cpe:2.3:a:quest:intrust:10.4:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

archives.neohapsis.com/archives/bugtraq/2012-03/0155.htmlnvdExploit
www.exploit-db.com/exploits/18672nvdExploit
www.securityfocus.com/bid/52773nvdExploit
secunia.com/advisories/48566nvdVendor Advisory
osvdb.org/80664nvd
exchange.xforce.ibmcloud.com/vulnerabilities/74442nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.009
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000