critical9.4Public exploit code
CVE-2007-2644
A certain ActiveX control in Morovia Barcode ActiveX Professional 3.3.1304 allows remote attackers to overwrite arbitrary files by calling the Save method with…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Morovia Barcode ActiveX Professional 3.3.1304 - Arbitrary File Overwrite2007-05-11 · remote · windows · Verified
Impact
A certain ActiveX control in Morovia Barcode ActiveX Professional 3.3.1304 allows remote attackers to overwrite arbitrary files by calling the Save method with an arbitrary filename.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Morovia | Barcode Activex Control | Version 3.3.1304 |
References
- NVD record
- CVE.org record
- http://moaxb.blogspot.com/2007/05/morovia-barcode-activex-professional.html
- http://osvdb.org/37786
- http://www.securityfocus.com/bid/23934
- http://www.shinnai.altervista.org/viewtopic.php?id=42&t_id=13
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34248
- https://www.exploit-db.com/exploits/3899
- http://moaxb.blogspot.com/2007/05/morovia-barcode-activex-professional.html
- http://osvdb.org/37786
- http://www.securityfocus.com/bid/23934
- http://www.shinnai.altervista.org/viewtopic.php?id=42&t_id=13
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34248
- https://www.exploit-db.com/exploits/3899