{"api_version":"1","generated_at":"2026-07-23T08:24:34+00:00","cve":"CVE-2011-1207","urls":{"html":"https://cve.report/CVE-2011-1207","api":"https://cve.report/api/cve/CVE-2011-1207.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2011-1207","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2011-1207"},"summary":{"title":"CVE-2011-1207","description":"The ActiveBar1 ActiveX control in the Data Dynamics ActiveBar ActiveX controls, as distributed in ActBar.ocx 1.0.6.5 in IBM Rational System Architect 11.4.0.2, 11.4.0.1, and earlier, does not properly restrict the SetLayoutData method, which allows remote attackers to execute arbitrary code via a crafted Data argument, a different vulnerability than CVE-2007-3883.  NOTE: some of these details are obtained from third party information.","state":"PUBLISHED","assigner":"mitre","published_at":"2011-05-05 02:39:46","updated_at":"2026-04-29 01:13:23"},"problem_types":["CWE-863","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"9.3","severity":"","vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","baseScore":9.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"}}],"references":[{"url":"http://securitytracker.com/id?1025464","name":"http://securitytracker.com/id?1025464","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"title":"IBM Rational System Architect ActiveBar ActiveX Control Lets Remote Users Execute Arbitrary Code - SecurityTracker","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/47643","name":"http://www.securityfocus.com/bid/47643","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"title":"Data Dynamics ActiveBar ActiveX Control Insecure Method Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://secunia.com/advisories/43399","name":"http://secunia.com/advisories/43399","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"IBM Rational System Architect ActiveBar ActiveX Control Vulnerabilities - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2011/1129","name":"http://www.vupen.com/english/advisories/2011/1129","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/43474","name":"http://secunia.com/advisories/43474","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Data Dynamics ActiveBar ActiveX Control \"SetLayoutData()\" Vulnerability - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.ibm.com/support/docview.wss?uid=swg21497689","name":"https://www.ibm.com/support/docview.wss?uid=swg21497689","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"title":"IBM notice: The page you requested cannot be displayed","mime":"text/html","httpstatus":"404","archivestatus":"410"},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-1207","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-1207","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2011","cve_id":"1207","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"rational_system_architect","cpe6":"11.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"1207","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"rational_system_architect","cpe6":"11.3.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"1207","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"rational_system_architect","cpe6":"11.3.1.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"1207","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"rational_system_architect","cpe6":"11.3.1.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"1207","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"rational_system_architect","cpe6":"11.3.1.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"1207","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"rational_system_architect","cpe6":"11.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"1207","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"rational_system_architect","cpe6":"11.4.0.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"1207","vulnerable":"1","versionEndIncluding":"11.4.0.2","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"rational_system_architect","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T22:21:34.066Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"1025464","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://securitytracker.com/id?1025464"},{"name":"43474","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/43474"},{"name":"ADV-2011-1129","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2011/1129"},{"name":"43399","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/43399"},{"name":"47643","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/47643"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://www.ibm.com/support/docview.wss?uid=swg21497689"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"descriptions":[{"lang":"en","value":"The ActiveBar1 ActiveX control in the Data Dynamics ActiveBar ActiveX controls, as distributed in ActBar.ocx 1.0.6.5 in IBM Rational System Architect 11.4.0.2, 11.4.0.1, and earlier, does not properly restrict the SetLayoutData method, which allows remote attackers to execute arbitrary code via a crafted Data argument, a different vulnerability than CVE-2007-3883.  NOTE: some of these details are obtained from third party information."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2011-05-05T01:00:00.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"1025464","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://securitytracker.com/id?1025464"},{"name":"43474","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/43474"},{"name":"ADV-2011-1129","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2011/1129"},{"name":"43399","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/43399"},{"name":"47643","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/47643"},{"tags":["x_refsource_CONFIRM"],"url":"https://www.ibm.com/support/docview.wss?uid=swg21497689"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2011-1207","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"The ActiveBar1 ActiveX control in the Data Dynamics ActiveBar ActiveX controls, as distributed in ActBar.ocx 1.0.6.5 in IBM Rational System Architect 11.4.0.2, 11.4.0.1, and earlier, does not properly restrict the SetLayoutData method, which allows remote attackers to execute arbitrary code via a crafted Data argument, a different vulnerability than CVE-2007-3883.  NOTE: some of these details are obtained from third party information."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"1025464","refsource":"SECTRACK","url":"http://securitytracker.com/id?1025464"},{"name":"43474","refsource":"SECUNIA","url":"http://secunia.com/advisories/43474"},{"name":"ADV-2011-1129","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2011/1129"},{"name":"43399","refsource":"SECUNIA","url":"http://secunia.com/advisories/43399"},{"name":"47643","refsource":"BID","url":"http://www.securityfocus.com/bid/47643"},{"name":"https://www.ibm.com/support/docview.wss?uid=swg21497689","refsource":"CONFIRM","url":"https://www.ibm.com/support/docview.wss?uid=swg21497689"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2011-1207","datePublished":"2011-05-05T01:00:00.000Z","dateReserved":"2011-03-03T00:00:00.000Z","dateUpdated":"2024-09-16T17:29:14.254Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2011-05-05 02:39:46","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["CWE-863","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","baseScore":9.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_system_architect:*:*:*:*:*:*:*:*","versionEndIncluding":"11.4.0.2","matchCriteriaId":"EF7EECC6-5489-4473-872E-E6831152AA27"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_system_architect:11.3:*:*:*:*:*:*:*","matchCriteriaId":"14EFA142-B129-4371-AECE-E0973A41E54A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_system_architect:11.3.1:*:*:*:*:*:*:*","matchCriteriaId":"1475F116-FBFF-4399-9DA1-00FD763B9444"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_system_architect:11.3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"8C2BCB9D-8D93-427F-9BC4-13296BA7815A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_system_architect:11.3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"06819BBC-4D20-4F57-8EFE-3E9243C0218F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_system_architect:11.3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"EB708B67-2212-40A8-9DAF-D44ABF6EA2DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_system_architect:11.4:*:*:*:*:*:*:*","matchCriteriaId":"21CE8B3D-4F13-4D91-AD88-DB99911BB78D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_system_architect:11.4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2D60E40D-98B8-4257-8718-55B008F5034A"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2011","CveId":"1207","Ordinal":"1","Title":"CVE-2011-1207","CVE":"CVE-2011-1207","Year":"2011"},"notes":[{"CveYear":"2011","CveId":"1207","Ordinal":"1","NoteData":"The ActiveBar1 ActiveX control in the Data Dynamics ActiveBar ActiveX controls, as distributed in ActBar.ocx 1.0.6.5 in IBM Rational System Architect 11.4.0.2, 11.4.0.1, and earlier, does not properly restrict the SetLayoutData method, which allows remote attackers to execute arbitrary code via a crafted Data argument, a different vulnerability than CVE-2007-3883.  NOTE: some of these details are obtained from third party information.","Type":"Description","Title":"CVE-2011-1207"},{"CveYear":"2011","CveId":"1207","Ordinal":"2","NoteData":"2011-05-04","Type":"Other","Title":"Published"}]}}}