CVEs-PoC/2008/CVE-2008-4923.md

CVE-2008-4923

Description

Multiple insecure method vulnerabilities in MW6 Technologies Aztec ActiveX control (AZTECLib.MW6Aztec, Aztec.dll) 3.0.0.1 allow remote attackers to overwrite arbitrary files via a full pathname argument to the (1) SaveAsBMP and (2) SaveAsWMF methods.

POC

Reference

• http://securityreason.com/securityalert/4561
• https://www.exploit-db.com/exploits/6870

Github

No PoCs found on GitHub currently.