critical9.3Public exploit code
CVE-2010-2932
Buffer overflow in BarCodeWiz BarCode 3.29 ActiveX control (BarcodeWiz.dll) allows remote attackers to execute arbitrary code via a long argument to the LoadPr…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Barcodewiz Barcode ActiveX Control 3.29 - Remote HeapSpray (Internet Explorer 6/7)2010-07-31 · remote · windows · Verified
- Barcodewiz Barcode ActiveX Control 3.29 - Remote Buffer Overflow (SEH)2010-07-30 · remote · windows · Verified
- Barcodewiz BarCode ActiveX 3.29 - Denial of Service (PoC)2010-07-30 · dos · windows · Verified
Impact
Buffer overflow in BarCodeWiz BarCode 3.29 ActiveX control (BarcodeWiz.dll) allows remote attackers to execute arbitrary code via a long argument to the LoadProperties method.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Barcodewiz | Barcode Activex Control | Version 3.29 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/40786
- http://www.exploit-db.com/exploits/14504
- http://www.exploit-db.com/exploits/14505
- http://www.exploit-db.com/exploits/14519
- http://www.securityfocus.com/bid/42097
- https://exchange.xforce.ibmcloud.com/vulnerabilities/60838
- http://secunia.com/advisories/40786
- http://www.exploit-db.com/exploits/14504
- http://www.exploit-db.com/exploits/14505
- http://www.exploit-db.com/exploits/14519
- http://www.securityfocus.com/bid/42097
- https://exchange.xforce.ibmcloud.com/vulnerabilities/60838