9.3
CVSSv2

CVE-2013-6040

Published: 21/01/2014 Updated: 07/08/2015
CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6
VMScore: 945
Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Vulnerability Summary

Multiple unspecified vulnerabilities in the MW6 Aztec, DataMatrix, and MaxiCode ActiveX controls allow remote malicious users to execute arbitrary code via a crafted HTML document.

Vulnerable Product Search on Vulmon Subscribe to Product

mw6tech aztec activex control -

mw6tech datamatrix activex control -

mw6tech maxicode activex control -

Exploits

<!-- =========================================================================== Problem: The Data parameter is subject to a buffer overflow DEFINITELY leading to arbitrary code execution COM Object - {F359732D-D020-40ED-83FF-F381EFE36B54} MW6Aztec Class File Description : Aztec ActiveX File Version : 4, 0, 0, 1 To trigger the overflo ...
<!-- =========================================================================== Problem: The Data parameter is subject to a buffer overflow PROBABLY leading to arbitrary code execution COM Object - {DE7DA0B5-7D7B-4CEA-8739-65CF600D511E} MW6DataMatrix Class File Description : DataMatrix ActiveX File Version : 4, 0, 0, 1 To trigger the ...
<!-- =========================================================================== Problem: The Data parameter is subject to a buffer overflow DEFINITELY leading to arbitrary code execution COM Object - {2355C601-37D1-42B4-BEB1-03C773298DC8} MW6MaxiCode Class File Description : MaxiCode ActiveX File Version : 4, 0, 0, 1 To trigger the o ...

Recent Articles

MiniDuke miscreants whip out old-school tricks to spy on world+dog
The Register • John Leyden • 27 Feb 2013

The '90s called... they want their malware back

A new strain of malware designed to spy on multiple government entities and institutions across the world has been discovered by anti-virus firm Kaspersky Lab. MiniDuke has infected government entities in the Ukraine, Belgium, Portugal, Romania, the Czech Republic and Ireland. In addition, a research institute, two think-tanks, and a healthcare provider in the US were also compromised. A prominent research organisation in Hungary was also infected with the mystery malware. An analysis of logs fr...