CVE-2013-6040
High
Description
MW6 Aztec, DataMatrix, and MaxiCode ActiveX controls before version 4.0 vulnerable to arbitrary code via a crafted HTML document. Latest versions (4.0) of MW6 Aztec, DataMatrix, and MaxiCode ActiveX controls have resolved the issue
SeverityHigh
CVSS8.1
Exploit probability—
ProductMw6tech Aztec Activex Control
PublishedJan 21, 2014
First seenJan 21, 2014
Weakness typeCWE-94Code injection
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mw6tech aztec_activex_control | No range specified | — |
| mw6tech datamatrix_activex_control | No range specified | — |
| mw6tech maxicode_activex_control | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.