PT-2008-6099 · Aztec · Azteclib.Mw6Aztec

Deltahackingteam · Published 2008-11-04 · Updated 2017-09-29 · CVE-2008-4923

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions AZTECLib.MW6Aztec version 3.0.0.1

Description The issue concerns insecure methods in the Aztec ActiveX control that allow remote attackers to overwrite arbitrary files. This is achieved by providing a full pathname argument to the SaveAsBMP and SaveAsWMF methods.

Recommendations For version 3.0.0.1, consider disabling the SaveAsBMP and SaveAsWMF methods until a patch is available to prevent remote attackers from overwriting arbitrary files. Restrict access to the Aztec.dll module to minimize the risk of exploitation. Avoid using full pathnames as arguments to these methods in the affected API endpoints until the issue is resolved.

Exploit

Fix

Related Identifiers

CVE-2008-4923

Affected Products

Azteclib.Mw6Aztec

References · 5

• 🔥 https://exploit-db.com/exploits/6870 · Exploit
• http://secunia.com/advisories/32425 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-4923 · Security Note
• http://securityfocus.com/bid/31974 · Note
• http://securityreason.com/securityalert/4561 · Note