PrecisionID Data Matrix Barcode ActiveX Control Multiple Arbitrary File Overwrite Vulnerabilities
BID:34322
Info
PrecisionID Data Matrix Barcode ActiveX Control Multiple Arbitrary File Overwrite Vulnerabilities
| Bugtraq ID: | 34322 |
| Class: | Input Validation Error |
| CVE: |
CVE-2009-1212 |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 31 2009 12:00AM |
| Updated: | Apr 15 2009 04:46PM |
| Credit: | Digital Security Research Group [DSecRG] |
| Vulnerable: |
PrecisionID Data Matrix Barcode ActiveX 0 |
| Not Vulnerable: | |
Discussion
PrecisionID Data Matrix Barcode ActiveX Control Multiple Arbitrary File Overwrite Vulnerabilities
PrecisionID Data Matrix Barcode ActiveX Control is prone to multiple vulnerabilities that let attackers overwrite arbitrary local files on the victim's computer in the context of an application using the ActiveX control (typically Internet Explorer).
PrecisionID Data Matrix Barcode ActiveX Control is prone to multiple vulnerabilities that let attackers overwrite arbitrary local files on the victim's computer in the context of an application using the ActiveX control (typically Internet Explorer).
Exploit / POC
PrecisionID Data Matrix Barcode ActiveX Control Multiple Arbitrary File Overwrite Vulnerabilities
To exploit these issues, an attacker must entice an unsuspecting victim into viewing a malicious webpage.
The following exploit is available:
To exploit these issues, an attacker must entice an unsuspecting victim into viewing a malicious webpage.
The following exploit is available:
Solution / Fix
PrecisionID Data Matrix Barcode ActiveX Control Multiple Arbitrary File Overwrite Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
PrecisionID Data Matrix Barcode ActiveX Control Multiple Arbitrary File Overwrite Vulnerabilities
References:
References:
- Data Matrix Barcode ActiveX Control Homepage (PrecisionID)
- Microsoft Knowledge Base Article 240797 (Microsoft)
- DSecRG