CVE-2008-4923
HIGH 9.0EPSS 7.1%
Multiple insecure method vulnerabilities in MW6 Technologies Aztec ActiveX control (AZTECLib.MW6Aztec, Aztec.dll) 3.0.0.1 allow remote attackers to overwrite arbitrary files via a full pathname argument to the (1) SaveAsBMP and (2) SaveAsWMF methods.
- CVSS v2.0
- 9.0 HIGH
AV:N/AC:L/Au:S/C:C/I:C/A:C - EPSS
- 7.15% chance of exploitation in the next 30 days, 94th percentile
- Published
- 2008-11-04
- Updated
- 2024-08-07