Unrated severityNVD Advisory· Published Nov 17, 2012· Updated Jun 16, 2026
CVE-2012-5897
CVE-2012-5897
Description
The (1) SimpleTree and (2) ReportTree classes in the ARDoc ActiveX control (ARDoc.dll) in Quest InTrust 10.4.0.853 and earlier do not properly implement the SaveToFile method, which allows remote attackers to write or overwrite arbitrary files via the bstrFileName argument.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
6cpe:2.3:a:quest:intrust:*:*:*:*:*:*:*:*+ 5 more
- cpe:2.3:a:quest:intrust:*:*:*:*:*:*:*:*range: <=10.4.0.853
- cpe:2.3:a:quest:intrust:10.1:*:*:*:*:*:*:*
- cpe:2.3:a:quest:intrust:10.2.5:*:*:*:*:*:*:*
- cpe:2.3:a:quest:intrust:10.3:*:*:*:*:*:*:*
- cpe:2.3:a:quest:intrust:10.4:*:*:*:*:*:*:*
- (no CPE)range: <=10.4.0.853
Patches
Vulnerability mechanics
References
6- archives.neohapsis.com/archives/bugtraq/2012-03/0155.htmlnvdExploit
- www.exploit-db.com/exploits/18672nvdExploit
- www.securityfocus.com/bid/52773nvdExploit
- secunia.com/advisories/48566nvdVendor Advisory
- osvdb.org/80664nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/74442nvd
News mentions
0No linked articles in our index yet.