CVE-2007-2644

CRITICAL 9.4CVE-2007-2644 · Published 13/05/2007 · updated 16/06/2026

In short

CVE-2007-2644 is a CRITICAL (CVSS 9.4) vulnerability affecting barcode activex control (morovia).
Chance of exploitation in the next 30 days (EPSS): 4.6%, higher than 91.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
barcode activex control morovia	`= 3.3.1304`	No fix yet

Description

A certain ActiveX control in Morovia Barcode ActiveX Professional 3.3.1304 allows remote attackers to overwrite arbitrary files by calling the Save method with an arbitrary filename.

References

moaxb.blogspot.com/2007/05/morovia-barcode-activex-professional.html
osvdb.org/37786
securityfocus.com/bid/23934
shinnai.altervista.org/viewtopic.php
exchange.xforce.ibmcloud.com/vulnerabilities/34248
exploit-db.com/exploits/3899

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free