PT-2008-6101 · Datamatrix · Datamatrixlib.Mw6Datamatrix

Deltahackingteam · Publicado 2008-11-04 · Atualizado 2017-09-29 · CVE-2008-4925

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions DATAMATRIXLib.MW6DataMatrix version 3.0.0.1

Description The issue concerns insecure methods in the DataMatrix ActiveX control, specifically the SaveAsBMP and SaveAsWMF methods. These methods allow remote attackers to overwrite arbitrary files by providing a full pathname as an argument.

Recommendations For version 3.0.0.1, consider disabling the SaveAsBMP and SaveAsWMF methods until a patch is available to prevent remote attackers from overwriting arbitrary files. Restrict access to the DataMatrix ActiveX control to minimize the risk of exploitation. Avoid using the full pathname argument in the affected methods until the issue is resolved.

Exploit

Correção

Identificadores relacionados

CVE-2008-4925

Produtos afetados

Datamatrixlib.Mw6Datamatrix

Referências · 5

• 🔥 https://exploit-db.com/exploits/6872 · Exploit
• http://securityreason.com/securityalert/4563 · Nota
• http://securityfocus.com/bid/31980 · Nota
• http://secunia.com/advisories/32425 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-4925 · Nota de Segurança