CVE-2013-6040
published 2014-01-21CVE-2013-6040: MW6 Aztec, DataMatrix, and MaxiCode ActiveX controls before version 4.0 vulnerable to arbitrary code via a crafted HTML document. Latest versions (4.0) of MW6…
PriorityP356high8.1CVSS 3.1
AVNACHPRNUINSUCHIHAH
EXPLOIT
EPSS
7.37%
93.6th percentile
MW6 Aztec, DataMatrix, and MaxiCode ActiveX controls before version 4.0 vulnerable to arbitrary code via a crafted HTML document. Latest versions (4.0) of MW6 Aztec, DataMatrix, and MaxiCode ActiveX controls have resolved the issue
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| mw6_tech | mw6_aztec_activex_controls | >= 0.0 < 4.0 | 4.0 |
| mw6_tech | mw6_datamatrix_activex_controls | >= 0.0 < 4.0 | 4.0 |
| mw6_tech | mw6_maxicode_activex_controls | >= 0.0 < 4.0 | 4.0 |
CVSS provenance
nvdv3.18.1HIGHCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.09.3CRITICALAV:N/AC:M/Au:N/C:C/I:C/A:C
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
Exploit-DB
MW6 Technologies Datamatrix - ActiveX 'Data' Buffer Overflow
exploitdb·2014-01-24
CVE-2013-6040 MW6 Technologies Datamatrix - ActiveX 'Data' Buffer Overflow
MW6 Technologies Datamatrix - ActiveX 'Data' Buffer Overflow
---
Exploit-DB
MW6 Technologies MaxiCode - ActiveX 'Data' Buffer Overflow (PoC)
exploitdb·2014-01-24
CVE-2013-6040 MW6 Technologies MaxiCode - ActiveX 'Data' Buffer Overflow (PoC)
MW6 Technologies MaxiCode - ActiveX 'Data' Buffer Overflow (PoC)
---
Exploit-DB
MW6 Technologies Aztec - ActiveX 'Data' Buffer Overflow (PoC)
exploitdb·2014-01-24
CVE-2013-6040 MW6 Technologies Aztec - ActiveX 'Data' Buffer Overflow (PoC)
MW6 Technologies Aztec - ActiveX 'Data' Buffer Overflow (PoC)
---
No writeups or analysis indexed.
2014-01-21
Published