PT-2007-3974 · Precisionid · Precisionid Barcode

Shinnai · Publicado 2007-05-14 · Atualizado 2017-10-11 · CVE-2007-2657

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions PrecisionID Barcode version 1.3

Description The issue is related to an unspecified vulnerability in the PrecisionID Barcode 1.3 ActiveX control. It allows remote attackers to cause a denial of service by passing a long argument to the SaveBarCode method.

Recommendations For PrecisionID Barcode version 1.3, consider restricting access to the SaveBarCode method until a patch is available. Avoid using the SaveBarCode method with long arguments to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2007-2657

Produtos afetados

Precisionid Barcode

Referências · 9

• 🔥 https://exploit-db.com/exploits/3910 · Exploit
• http://secunia.com/advisories/25258 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34267 · Nota
• http://shinnai.altervista.org/viewtopic.php?id=42&t_id=14 · Nota
• http://osvdb.org/36012 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-2657 · Nota de Segurança
• http://securityfocus.com/bid/23957 · Nota
• http://vupen.com/english/advisories/2007/1790 · Nota
• http://moaxb.blogspot.com/2007/05/moaxb-12-precisionid-barcode-activex.html · Nota