CVE-2011-1207

The ActiveBar1 ActiveX control in the Data Dynamics ActiveBar ActiveX controls, as distributed in ActBar.ocx 1.0.6.5 in IBM Rational System Architect 11.4.0.2, 11.4.0.1, and earlier, does not properly restrict the SetLayoutData method, which allows remote attackers to execute arbitrary code via a crafted Data argument, a different vulnerability than CVE-2007-3883. NOTE: some of these details are obtained from third party information.

• CWE-863

• http://secunia.com/advisories/43399Vendor Advisory
• http://secunia.com/advisories/43474Vendor Advisory
• http://securitytracker.com/id?1025464Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/47643Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2011/1129Vendor Advisory
• https://www.ibm.com/support/docview.wss?uid=swg21497689Patch, Vendor Advisory
• http://secunia.com/advisories/43399Vendor Advisory
• http://secunia.com/advisories/43474Vendor Advisory
• http://securitytracker.com/id?1025464Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/47643Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2011/1129Vendor Advisory
• https://www.ibm.com/support/docview.wss?uid=swg21497689Patch, Vendor Advisory

Published

May 5, 2011

Last Modified

Jun 16, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-1201The context implementation in WebKit, as used in Google Chro…
• CVE-2011-1202The xsltGenerateIdFunction function in functions.c in libxsl…
• CVE-2011-1203Google Chrome before 10.0.648.127 does not properly handle S…
• CVE-2011-1204Google Chrome before 10.0.648.127 does not properly handle a…
• CVE-2011-1205Multiple buffer overflows in unspecified COM objects in Rati…
• CVE-2011-1206Stack-based buffer overflow in the server process in ibmslap…
• CVE-2011-1208IBM solidDB 4.5.x before 4.5.182, 6.0.x before 6.0.1069, 6.1…
• CVE-2011-1209IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.39 a…
• CVE-2011-1213Integer underflow in lzhsr.dll in Autonomy KeyView, as used …
• CVE-2011-1214Stack-based buffer overflow in rtfsr.dll in Autonomy KeyView…
• CVE-2011-1215Stack-based buffer overflow in mw8sr.dll in Autonomy KeyView…
• CVE-2011-1216Stack-based buffer overflow in assr.dll in Autonomy KeyView,…