critical9.0Public exploit code
CVE-2008-4923
Multiple insecure method vulnerabilities in MW6 Technologies Aztec ActiveX control (AZTECLib.MW6Aztec, Aztec.dll) 3.0.0.1 allow remote attackers to overwrite a…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- MW6 Aztec - ActiveX 'Aztec.dll' Remote Insecure Method2008-10-29 · remote · windows · Verified
Impact
Multiple insecure method vulnerabilities in MW6 Technologies Aztec ActiveX control (AZTECLib.MW6Aztec, Aztec.dll) 3.0.0.1 allow remote attackers to overwrite arbitrary files via a full pathname argument to the (1) SaveAsBMP and (2) SaveAsWMF methods.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mw6 Technologies | Aztec Activex | Version 3.0.0.1 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/32425
- http://securityreason.com/securityalert/4561
- http://www.securityfocus.com/bid/31974
- https://www.exploit-db.com/exploits/6870
- http://secunia.com/advisories/32425
- http://securityreason.com/securityalert/4561
- http://www.securityfocus.com/bid/31974
- https://www.exploit-db.com/exploits/6870