CVE-2008-5089

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-11-14 · updated 2026-06-16

Description

Multiple insecure method vulnerabilities in the DDActiveReportsViewer2.ARViewer2 ActiveX control (arview2.ocx) in Data Dynamics ActiveReports 2.5.0.1314 allow remote attackers to overwrite arbitrary files via a call to the (1) Pages.Save, (2) PrintReport, or (3) Canvas.Save method.

Affected products

Datadynamics Activereports: 2.5.0.1314

References

http://secunia.com/advisories/31894
http://vuln.sg/ddarviewer2501314-en.html
http://www.securityfocus.com/bid/31227
http://www.vupen.com/english/advisories/2008/2612
https://exchange.xforce.ibmcloud.com/vulnerabilities/45219
http://secunia.com/advisories/31894
http://vuln.sg/ddarviewer2501314-en.html
http://www.securityfocus.com/bid/31227
http://www.vupen.com/english/advisories/2008/2612
https://exchange.xforce.ibmcloud.com/vulnerabilities/45219

Get alerted when CVE-2008-5089 or the next vulnerability affects your stack