CVE-2013-6040
8.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Summary
MW6 Aztec, DataMatrix, and MaxiCode ActiveX controls before version 4.0 vulnerable to arbitrary code via a crafted HTML document. Latest versions (4.0) of MW6 Aztec, DataMatrix, and MaxiCode ActiveX controls have resolved the issue
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| MW6 Tech | MW6 Aztec ActiveX Controls | 0.0 < 4.0 | affected |
| MW6 Tech | MW6 DataMatrix ActiveX Controls | 0.0 < 4.0 | affected |
| MW6 Tech | MW6 MaxiCode ActiveX Controls | 0.0 < 4.0 | affected |
Weaknesses
- CWE-94: Improper Control of Generation of Code
ADP Enrichment
CVE Program Container
Additional References
- http://www.exploit-db.com/exploits/31176
- http://www.kb.cert.org/vuls/id/219470
- http://www.exploit-db.com/exploits/31177
CISA ADP Vulnrichment
- SSVC:
- Exploitation: poc
- Automatable: no
- Technical Impact: total
References
- http://www.exploit-db.com/exploits/31176
- http://www.kb.cert.org/vuls/id/219470
- http://www.exploit-db.com/exploits/31177
- https://www.mw6tech.com
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.