CVE-2012-1241

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2012-04-16 · updated 2026-06-16
Weakness: CWE-264

Description

GRScript18.dll before 1.2.2.0 in ActiveScriptRuby (ASR) before 1.8.7 does not properly restrict interaction with an Internet Explorer ActiveX environment, which allows remote attackers to execute arbitrary Ruby code via a crafted HTML document.

Affected products

Artonx.Org Activescriptruby: through 1.0.8.8; 1.6.0.1, 1.6.0.2, 1.6.0.3, 1.6.0.5, 1.6.2.0, 1.6.2.1 (+55)

References

http://blade.nagaokaut.ac.jp/cgi-bin/scat.rb/ruby/ruby-list/47170
http://jvn.jp/en/jp/JVN33283707/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2012-000031
http://secunia.com/advisories/48811
http://www.securityfocus.com/bid/53011
https://exchange.xforce.ibmcloud.com/vulnerabilities/74866
http://blade.nagaokaut.ac.jp/cgi-bin/scat.rb/ruby/ruby-list/47170
http://jvn.jp/en/jp/JVN33283707/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2012-000031
http://secunia.com/advisories/48811
http://www.securityfocus.com/bid/53011
https://exchange.xforce.ibmcloud.com/vulnerabilities/74866

Get alerted when CVE-2012-1241 or the next vulnerability affects your stack