CVE-2007-4982 Multiple absolute path traversal vulnerabilities in the MW6QRCode.QRCode.1 ActiveX control in MW6QRCode.dll in MW6 Technologies QRCode ActiveX 3.0.0.1 and earlier allow remote attackers to create or o...
HighCVSS 10.0
EPSS 10.4%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple absolute path traversal vulnerabilities in the MW6QRCode.QRCode.1 ActiveX control in MW6QRCode.dll in MW6 Technologies QRCode ActiveX 3.0.0.1 and earlier allow remote attackers to create or overwrite arbitrary files via a full pathname in the argument to the (1) SaveAsBMP or (2) SaveAsWMF method. NOTE: some of these details are obtained from third party information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mw6 technologies qrcode activex | <= 3.0.0.1 | No fix listed |
References
- 37914 vdb-entry
- 37915 vdb-entry
- 26836 third-party-advisory vendor-advisory
- 25702 vdb-entry
- www.shinnai.altervista.org
- ADV-2007-3195 vdb-entry
- mw6technologies-qrcode-file-overwrite(36666) vdb-entry
- 4420 exploit