CVE-2013-6040

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2013-6040
MW6 Aztec, DataMatrix, and MaxiCode ActiveX controls before version 4.0 vulnerable to arbitrary code via a crafted HTML document. Latest versions (4.0) of MW6 Aztec, DataMatrix, and MaxiCode ActiveX controls have resolved the issue

8.1 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 2.2 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

9.3 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability : 8.6 / Impact : 10.0

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References
Link Resource
http://www.exploit-db.com/exploits/31176 Exploit
http://www.exploit-db.com/exploits/31177 Exploit
http://www.kb.cert.org/vuls/id/219470 US Government Resource
https://www.mw6tech.com
http://www.exploit-db.com/exploits/31176 Exploit
http://www.exploit-db.com/exploits/31177 Exploit
http://www.kb.cert.org/vuls/id/219470 US Government Resource
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:mw6tech:aztec_activex_control:-:*:*:*:*:*:*:*
cpe:2.3:a:mw6tech:datamatrix_activex_control:-:*:*:*:*:*:*:*
cpe:2.3:a:mw6tech:maxicode_activex_control:-:*:*:*:*:*:*:*
History

21 Nov 2024, 01:58

Type Values Removed Values Added
References () http://www.exploit-db.com/exploits/31176 - Exploit () http://www.exploit-db.com/exploits/31176 - Exploit
References () http://www.exploit-db.com/exploits/31177 - Exploit () http://www.exploit-db.com/exploits/31177 - Exploit
References () http://www.kb.cert.org/vuls/id/219470 - US Government Resource () http://www.kb.cert.org/vuls/id/219470 - US Government Resource

05 Sep 2024, 15:35

Type Values Removed Values Added
CVSS v2 : 9.3
v3 : unknown 		v2 : 9.3
v3 : 8.1

03 Sep 2024, 15:15

Type Values Removed Values Added
Summary (en) Multiple unspecified vulnerabilities in the MW6 Aztec, DataMatrix, and MaxiCode ActiveX controls allow remote attackers to execute arbitrary code via a crafted HTML document. (en) MW6 Aztec, DataMatrix, and MaxiCode ActiveX controls before version 4.0 vulnerable to arbitrary code via a crafted HTML document. Latest versions (4.0) of MW6 Aztec, DataMatrix, and MaxiCode ActiveX controls have resolved the issue
References
  • () https://www.mw6tech.com -
Information

Published : 2014-01-21 01:55

Updated : 2025-04-11 00:51

NVD link : CVE-2013-6040

Mitre link : CVE-2013-6040

CVE.ORG link : CVE-2013-6040

JSON object : View

Products Affected

mw6tech

  • aztec_activex_control
  • datamatrix_activex_control
  • maxicode_activex_control
CWE
NVD-CWE-noinfo