PT-2009-3756 · Precisionid · Datamatrix Activex Control

Published 2009-04-01 · Updated 2018-10-10 · CVE-2009-1212

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:C/A:N

Name of the Vulnerable Software and Affected Versions Datamatrix ActiveX control (DMATRIXLib.Datamatrix) (affected versions not specified)

Description The issue concerns insecure methods in the PrecisionID Datamatrix ActiveX control, specifically the SaveBarCode and SaveEnhWMF methods. These methods allow remote attackers to overwrite arbitrary files.

Recommendations For the Datamatrix ActiveX control, consider disabling the SaveBarCode and SaveEnhWMF methods until a patch is available to prevent remote attackers from overwriting arbitrary files. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2009-1212

Affected Products

Datamatrix Activex Control

References · 5

• 🔥 https://exploit-db.com/exploits/8332 · Exploit
• 🔥 http://dsecrg.com/pages/vul/DSECRG-09-030.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2009-1212 · Security Note
• http://securityfocus.com/bid/34322 · Note
• http://securityfocus.com/archive/1/502319/100/0/threaded · Note