PT-2007-3963 · Morovia · Morovia Barcode Activex Professional

Shinnai · Publicado 2007-05-13 · Atualizado 2017-10-11 · CVE-2007-2644

Positive Technologies (AI Summary)

CVSS v2.0

9.4

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:C/A:C

Name of the Vulnerable Software and Affected Versions Morovia Barcode ActiveX Professional version 3.3.1304

Description The issue allows remote attackers to overwrite arbitrary files by calling the Save method with an arbitrary filename, potentially leading to unauthorized data modification.

Recommendations For Morovia Barcode ActiveX Professional version 3.3.1304, consider restricting access to the Save method to prevent arbitrary file overwrites until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2007-2644

Produtos afetados

Morovia Barcode Activex Professional

Referências · 7

• 🔥 https://exploit-db.com/exploits/3899 · Exploit
• http://shinnai.altervista.org/viewtopic.php?id=42&t_id=13 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-2644 · Nota de Segurança
• http://moaxb.blogspot.com/2007/05/morovia-barcode-activex-professional.html · Nota
• http://osvdb.org/37786 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34248 · Nota
• http://securityfocus.com/bid/23934 · Nota