vendor:
DataMatrix Module
by:
Not Specified
7,8
CVSS
HIGH
Buffer Overflow
119
CWE
Product Name: DataMatrix Module
Affected Version From: 4.0.0.1
Affected Version To: 4.0.0.1
Patch Exists: NO
Related CWE: Not Specified
CPE: a:mw6_technologies:datamatrix_module
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Not Specified
Not Specified
Buffer Overflow in MW6DataMatrix Class
The Data parameter of the MW6DataMatrix Class is subject to a buffer overflow, which could lead to arbitrary code execution. To trigger the overflow, a string larger than 10000 characters must be entered. The !exploitable windbg plugin classifies the vulnerability as EXPLOITABLE.
Mitigation:
Ensure that user input is properly validated and sanitized.