high7.8Public exploit code
CVE-2009-1212
Multiple insecure method vulnerabilities in PRECIS~2.DLL in the PrecisionID Datamatrix ActiveX control (DMATRIXLib.Datamatrix) allow remote attackers to overwr…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- PrecisionID Datamatrix - ActiveX Arbitrary File Overwrite2009-03-31 · remote · windows · Verified
Impact
Multiple insecure method vulnerabilities in PRECIS~2.DLL in the PrecisionID Datamatrix ActiveX control (DMATRIXLib.Datamatrix) allow remote attackers to overwrite arbitrary files via the (1) SaveBarCode and (2) SaveEnhWMF methods.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Precisionid | Data Matrix Barcode Activex Control | All versions |
References
- NVD record
- CVE.org record
- http://dsecrg.com/pages/vul/DSECRG-09-030.html
- http://www.securityfocus.com/archive/1/502319/100/0/threaded
- http://www.securityfocus.com/bid/34322
- https://www.exploit-db.com/exploits/8332
- http://dsecrg.com/pages/vul/DSECRG-09-030.html
- http://www.securityfocus.com/archive/1/502319/100/0/threaded
- http://www.securityfocus.com/bid/34322
- https://www.exploit-db.com/exploits/8332