CVE-2007-4982

Multiple absolute path traversal vulnerabilities in the MW6QRCode.QRCode.1 ActiveX control in MW6QRCode.dll in MW6 Technologies QRCode ActiveX 3.0.0.1 and earlier allow remote attackers to create or overwrite arbitrary files via a full pathname in the argument to the (1) SaveAsBMP or (2) SaveAsWMF method. NOTE: some of these details are obtained from third party information.

Link	Resource
http://www.shinnai.altervista.org/exploits/OREurGhGgAtlCT8J2jSY.html
http://secunia.com/advisories/26836	Vendor Advisory
http://www.securityfocus.com/bid/25702
http://osvdb.org/37915
http://osvdb.org/37914
http://www.vupen.com/english/advisories/2007/3195
https://exchange.xforce.ibmcloud.com/vulnerabilities/36666
https://www.exploit-db.com/exploits/4420

Configuration 1

cpe:2.3:a:mw6_technologies:qrcode_activex:*:*:*:*:*:*:*:*

---

Published : 2007-09-19 06:17

Updated : 2017-09-29 01:29

---

NVD link : CVE-2007-4982

Mitre link : CVE-2007-4982

No products.

CWE-22