CVE-2007-2744

EPSS 5.5%

Stack-based buffer overflow in the PrecisionID Barcode 1.9 ActiveX control in PrecisionID_Barcode.dll allows remote attackers to cause a denial of service (Internet Explorer 6 crash), and possibly execute arbitrary code, via a long argument to the SaveBarCode method. NOTE: this issue might overlap CVE-2007-2657.

Affected products

n/a · n/a

public PoCs found — 1

exploitdbwww.exploit-db.com/exploits/3937unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://moaxb.blogspot.com/2007/05/moaxb-16-ie-6-precisionid-barcode.html http://osvdb.org/36024 http://secunia.com/advisories/25253 https://exchange.xforce.ibmcloud.com/vulnerabilities/34339 http://www.securityfocus.com/bid/24010 http://www.shinnai.altervista.org/viewtopic.php?id=42&t_id=18