CVE-2007-2755 The PrecisionID Barcode 1.9 ActiveX control in PrecisionID_Barcode.dll, when Internet Explorer 6 is used, allows remote attackers to overwrite arbitrary files via a full pathname to the SaveToFile fun...
HighCVSS 10.0
EPSS 4.4%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The PrecisionID Barcode 1.9 ActiveX control in PrecisionID_Barcode.dll, when Internet Explorer 6 is used, allows remote attackers to overwrite arbitrary files via a full pathname to the SaveToFile function, a different vulnerability than CVE-2007-2744.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| precisionid barcode | = 1.9 | No fix listed |
References
- moaxb.blogspot.com exploit
- 37957 vdb-entry
- 24014 vdb-entry
- www.shinnai.altervista.org exploit
- precisionid-precisionid-file-overwrite(34337) vdb-entry
- 3938 exploit