CVE-2012-1241

N/A Unknown
Published: April 16, 2012 Modified: April 29, 2026
View on NVD

Description

GRScript18.dll before 1.2.2.0 in ActiveScriptRuby (ASR) before 1.8.7 does not properly restrict interaction with an Internet Explorer ActiveX environment, which allows remote attackers to execute arbitrary Ruby code via a crafted HTML document.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
http://blade.nagaokaut.ac.jp/cgi-bin/scat.rb/ruby/ruby-list/47170
Source: vultures@jpcert.or.jp
http://jvn.jp/en/jp/JVN33283707/index.html
Source: vultures@jpcert.or.jp
http://jvndb.jvn.jp/jvndb/JVNDB-2012-000031
Source: vultures@jpcert.or.jp
http://secunia.com/advisories/48811
Source: vultures@jpcert.or.jp
http://www.securityfocus.com/bid/53011
Source: vultures@jpcert.or.jp
https://exchange.xforce.ibmcloud.com/vulnerabilities/74866
Source: vultures@jpcert.or.jp
http://blade.nagaokaut.ac.jp/cgi-bin/scat.rb/ruby/ruby-list/47170
Source: af854a3a-2127-422b-91ae-364da2661108
http://jvn.jp/en/jp/JVN33283707/index.html
Source: af854a3a-2127-422b-91ae-364da2661108
http://jvndb.jvn.jp/jvndb/JVNDB-2012-000031
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/48811
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/bid/53011
Source: af854a3a-2127-422b-91ae-364da2661108
https://exchange.xforce.ibmcloud.com/vulnerabilities/74866
Source: af854a3a-2127-422b-91ae-364da2661108

12 reference(s) from NVD

Quick Stats

CVSS v3 Score
N/A / 10.0
EPSS (Exploit Probability)
1.7%
74th percentile
Exploitation Status
Not in CISA KEV

Weaknesses (CWE)

CWE-264

Affected Vendors

artonx.org

Related CVEs

CVE-2026-9677 N/A
CVE-2026-13245 6.1
CVE-2026-12404 5.3
CVE-2026-10820 N/A
CVE-2026-12415 9.8