CVE-2008-4926

EUVD-2008-4905
Multiple insecure method vulnerabilities in MW6 Technologies PDF417 ActiveX control (MW6PDF417Lib.PDF417, MW6PDF417.dll) 3.0.0.1 allow remote attackers to overwrite arbitrary files via a full pathname argument to the (1) SaveAsBMP and (2) SaveAsWMF methods.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:S/C:C/I:C/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 83%
Affected Products (NVD)
VendorProductVersion
mw6_technologiespdf417_activex
3.0.0.1
𝑥
= Vulnerable software versions
References
http://secunia.com/advisories/32425
http://www.securityfocus.com/bid/31983
https://www.exploit-db.com/exploits/6873
http://secunia.com/advisories/32425
http://www.securityfocus.com/bid/31983
https://www.exploit-db.com/exploits/6873