TEC-IT TBarCode OCX ActiveX Control Arbitrary File Overwrite Vulnerability
BID:24440
Info
TEC-IT TBarCode OCX ActiveX Control Arbitrary File Overwrite Vulnerability
| Bugtraq ID: | 24440 |
| Class: | Input Validation Error |
| CVE: |
CVE-2007-3233 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 12 2007 12:00AM |
| Updated: | May 07 2015 05:37PM |
| Credit: | shinnai is credited with the discovery of this vulnerability. |
| Vulnerable: |
TEC-IT TBarCode OCX 0 |
| Not Vulnerable: | |
Discussion
TEC-IT TBarCode OCX ActiveX Control Arbitrary File Overwrite Vulnerability
TBarCode ActiveX control is prone to a vulnerability that could permit an attacker to overwrite arbitrary files.
The attacker can exploit this issue to overwrite arbitrary files on the victim's computer in the context of the vulnerable application using the ActiveX control (typically Internet Explorer).
TBarCode ActiveX control is prone to a vulnerability that could permit an attacker to overwrite arbitrary files.
The attacker can exploit this issue to overwrite arbitrary files on the victim's computer in the context of the vulnerable application using the ActiveX control (typically Internet Explorer).
Exploit / POC
TEC-IT TBarCode OCX ActiveX Control Arbitrary File Overwrite Vulnerability
The following proof-of-concept exploit is available:
The following proof-of-concept exploit is available:
Solution / Fix
TEC-IT TBarCode OCX ActiveX Control Arbitrary File Overwrite Vulnerability
Solution:
The vendor released an update to address this issue. Please see the references for more information.
TEC-IT TBarCode OCX 0
Solution:
The vendor released an update to address this issue. Please see the references for more information.
TEC-IT TBarCode OCX 0
-
TEC-IT TBarCode_Setup.msi
http://ds1.downloadtech.net/cn1004/TBarCode_Setup.msi
References
TEC-IT TBarCode OCX ActiveX Control Arbitrary File Overwrite Vulnerability
References:
References:
- Bar Code Tools for Microsoft Windows (TEC-IT)
- Microsoft Knowledge Base Article 240797 (Microsoft)