critical9.0Public exploit code
CVE-2008-4925
Multiple insecure method vulnerabilities in MW6 Technologies DataMatrix ActiveX control (DATAMATRIXLib.MW6DataMatrix, DataMatrix.dll) 3.0.0.1 allow remote atta…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- MW6 Datamatrix - ActiveX 'Datamatrix.dll' Insecure Method2008-10-29 · remote · windows · Verified
Impact
Multiple insecure method vulnerabilities in MW6 Technologies DataMatrix ActiveX control (DATAMATRIXLib.MW6DataMatrix, DataMatrix.dll) 3.0.0.1 allow remote attackers to overwrite arbitrary files via a full pathname argument to the (1) SaveAsBMP and (2) SaveAsWMF methods.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mw6 Technologies | Datamatrix Activex | Version 3.0.0.1 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/32425
- http://securityreason.com/securityalert/4563
- http://www.securityfocus.com/bid/31980
- https://www.exploit-db.com/exploits/6872
- http://secunia.com/advisories/32425
- http://securityreason.com/securityalert/4563
- http://www.securityfocus.com/bid/31980
- https://www.exploit-db.com/exploits/6872