CVE-2007-4982

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

10.42%

Published

Sep 19, 2007

Modified

Jun 16, 2026

Public PoC / Exploit (2)

All weaponized →

TrickestTrickest PoC index Exploit-DBMW6 Technologies QRCode ActiveX 3.0 - Remote File Overwrite

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Multiple absolute path traversal vulnerabilities in the MW6QRCode.QRCode.1 ActiveX control in MW6QRCode.dll in MW6 Technologies QRCode ActiveX 3.0.0.1 and earlier allow remote attackers to create or overwrite arbitrary files via a full pathname in the argument to the (1) SaveAsBMP or (2) SaveAsWMF method. NOTE: some of these details are obtained from third party information.

Weaknesses (CWE)

CWE-22

Affected Products (1)

mw6_technologies · qrcode_activexvulnerable

References (16)

http://osvdb.org/37914

http://osvdb.org/37915

http://secunia.com/advisories/26836

Vendor Advisory

http://www.securityfocus.com/bid/25702

http://www.shinnai.altervista.org/exploits/OREurGhGgAtlCT8J2jSY.html

http://www.vupen.com/english/advisories/2007/3195

https://exchange.xforce.ibmcloud.com/vulnerabilities/36666

https://www.exploit-db.com/exploits/4420

http://osvdb.org/37914

KEV Catalog EPSS Scores Vendors All CVEs