CVE-2007-2755

PrecisionID Barcode 1.9 - Path Traversal

Title source: llm

Description

The PrecisionID Barcode 1.9 ActiveX control in PrecisionID_Barcode.dll, when Internet Explorer 6 is used, allows remote attackers to overwrite arbitrary files via a full pathname to the SaveToFile function, a different vulnerability than CVE-2007-2744.

Exploits (1)

exploitdb WORKING POC VERIFIED

by shinnai · htmlremotewindows

https://www.exploit-db.com/exploits/3938

View Code ZIP pw:eip

References (6)

[Exploit] http://moaxb.blogspot.com/2007/05/moaxb-16-bonus-ie-6-precisionid-barcode.html

[Third Party Advisory, VDB Entry] http://osvdb.org/37957

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/24014

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/34337

[Exploit, Third Party Advisory] https://www.exploit-db.com/exploits/3938

[Exploit] http://www.shinnai.altervista.org/viewtopic.php?id=42&t_id=18

Scores

EPSS 0.0937

EPSS Percentile 92.8%

Details

Status published

Products (1)

precisionid_barcode/precisionid_barcode 1.9

Published May 17, 2007

Tracked Since Feb 18, 2026