Absolute path traversal vulnerability in the Data Dynamics ActiveReport (ActiveReports) ActiveX control in actrpt2.dll 2.5 and earlier allows remote attackers to create or overwrite arbitrary files via a full pathname in the first argument to the SaveLayout method.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Activereports | Datadynamics | * | 2.5 (including) |