GCVE-110-CERTCC-2011-663809

Advisory PublishedCVSS 10.0/10

Vulnetix · Advisory published June 5, 2012

The MarkAny ContentSAFER MASetupCaller ActiveX control fails to restrict access to dangerous methods, which can allow a remote unauthenticated attacker to download and execute arbitrary code on a vulnerable system.

Download JSON Open in Console

Risk Scores

CVSS 2.0

10.0/10

Critical · AV:N/AC:L/Au:N/C:C/I:C/A:C

certcc-cam

impact0population0exploitation0widely_known0score_current0ease_of_exploitation0

certcc-vrda

d1_impact4d1_population2d1_direct_report1

certcc-cvss-temporal-env

temporal_score8.7remediation_levelOFreport_confidenceCenvironmental_score8.7target_distributionNDenvironmental_vectorCDP:ND/TD:ND/CR:ND/IR:ND/AR:ND

Aliases

CVE-2012-2990

Transitive aliases

GSD-2012-2990 GHSA-6ff5-xppw-fx3m

References

MarkAny ContentSAFER MASetupCaller ActiveX control arbitrary download and execution

url

MarkAny ContentSAFER MASetupCaller ActiveX control arbitrary download and execution

url

MarkAny ContentSAFER MASetupCaller ActiveX control arbitrary download and execution

url

MarkAny ContentSAFER MASetupCaller ActiveX control arbitrary download and execution

advisory

Browse GCVE Records

73,280 records in the GCVE database · Updated July 17, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON