Arbitrary File Read and Remote Code Execution Vulnerability in EdrawSoft EDOFFICE.EDOfficeCtrl.1 ActiveX Control

CVE-2013-0501 · HIGH Severity

AV:N/AC:M/AU:N/C:C/I:C/A:C

The EdrawSoft EDOFFICE.EDOfficeCtrl.1 ActiveX control, as used in Edraw Office Viewer Component, the client in IBM Cognos Disclosure Management (CDM) 10.2.0, and other products, allows remote attackers to read arbitrary files, or download an arbitrary program onto a client machine and execute this program, via a crafted web site.

Learn more about our Cis Benchmark Audit For Ibm I.