PT-2009-3756 · Precisionid · Datamatrix Activex Control

Publicado 2009-04-01 · Atualizado 2018-10-10 · CVE-2009-1212

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:C/A:N

Name of the Vulnerable Software and Affected Versions Datamatrix ActiveX control (DMATRIXLib.Datamatrix) (affected versions not specified)

Description The issue concerns insecure methods in the PrecisionID Datamatrix ActiveX control, specifically the SaveBarCode and SaveEnhWMF methods. These methods allow remote attackers to overwrite arbitrary files.

Recommendations For the Datamatrix ActiveX control, consider disabling the SaveBarCode and SaveEnhWMF methods until a patch is available to prevent remote attackers from overwriting arbitrary files. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2009-1212

Produtos afetados

Datamatrix Activex Control

Referências · 5

• 🔥 https://exploit-db.com/exploits/8332 · Exploit
• 🔥 http://dsecrg.com/pages/vul/DSECRG-09-030.html · Exploit
• http://securityfocus.com/bid/34322 · Nota
• http://securityfocus.com/archive/1/502319/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-1212 · Nota de Segurança