Skip to content

CVE-2008-4923 Multiple insecure method vulnerabilities in MW6 Technologies Aztec ActiveX control (AZTECLib.MW6Aztec, Aztec.dll) 3.0.0.1 allow remote attackers to overwrite arbitrary files via a full pathname argume...

HighCVSS 9.0 EPSS 7.1% Public exploit
Published
Updated
Exploit status
Public exploit available

Description

Multiple insecure method vulnerabilities in MW6 Technologies Aztec ActiveX control (AZTECLib.MW6Aztec, Aztec.dll) 3.0.0.1 allow remote attackers to overwrite arbitrary files via a full pathname argument to the (1) SaveAsBMP and (2) SaveAsWMF methods.

Affected products

ProductAffected versionsFixed in
mw6 technologies aztec activex = 3.0.0.1 No fix listed

References

  • 32425 third-party-advisory vendor-advisory
  • 4561 third-party-advisory
  • 31974 vdb-entry
  • 6870 exploit