PT-2007-3963 · Morovia · Morovia Barcode Activex Professional

Shinnai · Published 2007-05-13 · Updated 2017-10-11 · CVE-2007-2644

Positive Technologies (AI Summary)

CVSS v2.0

9.4

High

Base vector

AV:N/AC:L/Au:N/C:N/I:C/A:C

Name of the Vulnerable Software and Affected Versions Morovia Barcode ActiveX Professional version 3.3.1304

Description The issue allows remote attackers to overwrite arbitrary files by calling the Save method with an arbitrary filename, potentially leading to unauthorized data modification.

Recommendations For Morovia Barcode ActiveX Professional version 3.3.1304, consider restricting access to the Save method to prevent arbitrary file overwrites until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2007-2644

Affected Products

Morovia Barcode Activex Professional

References · 7

• 🔥 https://exploit-db.com/exploits/3899 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-2644 · Security Note
• http://shinnai.altervista.org/viewtopic.php?id=42&t_id=13 · Note
• http://moaxb.blogspot.com/2007/05/morovia-barcode-activex-professional.html · Note
• http://osvdb.org/37786 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34248 · Note
• http://securityfocus.com/bid/23934 · Note