Exploitation Summary
EIP tracks 1 public exploit for CVE-2007-2644. PoCs published by shinnai.
AI-analyzed exploit summary This exploit leverages an arbitrary file overwrite vulnerability in Morovia Barcode ActiveX Professional 3.3 (build 1304) by abusing the Save method to overwrite the system.ini file, potentially causing system instability. The PoC is delivered via an HTML page with embedded VBScript and requires user interaction (clicking a button).
Description
A certain ActiveX control in Morovia Barcode ActiveX Professional 3.3.1304 allows remote attackers to overwrite arbitrary files by calling the Save method with an arbitrary filename.
Exploits (1)
This exploit leverages an arbitrary file overwrite vulnerability in Morovia Barcode ActiveX Professional 3.3 (build 1304) by abusing the Save method to overwrite the system.ini file, potentially causing system instability. The PoC is delivered via an HTML page with embedded VBScript and requires user interaction (clicking a button).