CVE-2008-5089: Datadynamics Activereports

High severity, CVSS 9.3. EPSS: 2.8% chance of exploitation in the next 30 days.

Multiple insecure method vulnerabilities in the DDActiveReportsViewer2.ARViewer2 ActiveX control (arview2.ocx) in Data Dynamics ActiveReports 2.5.0.1314 allow remote attackers to overwrite arbitrary files via a call to the (1) Pages.Save, (2) PrintReport, or (3) Canvas.Save method.

Affected products

• Datadynamics Activereports: version 2.5.0.1314 only

Published 2008-11-14. Last modified 2026-06-16.