CVE-2018-5221
Quick assessment
Affected
n/a n/a
Exploitation
High exploitation probability; assess promptly
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
BarCodeWiz Barcode是一款用于自动化生成条形码的工具。ActiveX control（BarcodeWiz.DLL）是其中的一个条形码打印控件。 BarCodeWiz Barcode 6.7之前的版本中的ActiveX control（BarcodeWiz.DLL）中存在多个缓冲区溢出漏洞。远程攻击者可通过向BottomText或TopText属性发送较长的参数利用该漏洞执行任意代码。
Possible ATT&CK Techniques 2 AI
T1563 · Remote Service Session Hijacking T1203 · Exploitation for Client Execution
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2018-5221
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Multiple buffer overflows in BarCodeWiz BarCode before 6.7 ActiveX control (BarcodeWiz.DLL) allow remote attackers to execute arbitrary code via a long argument to the (1) BottomText or (2) TopText property.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
BarCodeWiz Barcode ActiveX control（BarcodeWiz.DLL）缓冲区错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
BarCodeWiz Barcode是一款用于自动化生成条形码的工具。ActiveX control（BarcodeWiz.DLL）是其中的一个条形码打印控件。 BarCodeWiz Barcode 6.7之前的版本中的ActiveX control（BarcodeWiz.DLL）中存在多个缓冲区溢出漏洞。远程攻击者可通过向BottomText或TopText属性发送较长的参数利用该漏洞执行任意代码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2018-5221
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2018-5221
请登录查看更多情报信息。
Exploits & Public PoCs for CVE-2018-5221 (1)
Other References for CVE-2018-5221 (1)
Same Patch Batch · n/a · 2018-01-09 · 20 CVEs total
| CVE-2017-15129 | Linux kernel 竞争条件问题漏洞 | |
| CVE-2017-18025 | Innotube ITGuard-Manager 安全漏洞 | |
| CVE-2018-5312 | WordPress tabs-responsive插件跨站脚本漏洞 | |
| CVE-2018-5311 | WordPress Easy Custom Auto Excerpt插件跨站脚本漏洞 | |
| CVE-2018-5310 | WordPress Media from FTP 路径遍历漏洞 | |
| CVE-2018-5309 | PoDoFo 安全漏洞 | |
| CVE-2018-5308 | PoDoFo 安全漏洞 | |
| CVE-2018-5211 | PHP Melody SQL注入漏洞 | |
| CVE-2015-1290 | Google Chrome V8引擎和Digia Qt QtWebEngineCore 安全漏洞 | |
| CVE-2015-1208 | FFmpeg 数字错误漏洞 | |
| CVE-2017-1000465 | Sulu-standard 跨站脚本漏洞 | |
| CVE-2017-1000415 | INSIDE Secure MatrixSSL 安全漏洞 | |
| CVE-2018-4871 | Adobe Flash Player 缓冲区错误漏洞 | |
| CVE-2017-9663 | General Motors和Shanghai OnStar iOS Client 安全漏洞 | |
| CVE-2017-16740 | Rockwell Automation Allen-Bradley MicroLogix 1400 Controllers Series B和C 缓冲区错误漏洞 | |
| CVE-2017-12697 | General Motors和Shanghai OnStar iOS Client 安全漏洞 | |
| CVE-2017-12695 | General Motors和Shanghai OnStar iOS Client 安全漏洞 | |
| CVE-2017-1000429 | rui Li finecms 跨站脚本漏洞 | |
| CVE-2018-5316 | WordPress SagePay Server Gateway for WooCommerce插件跨站脚本漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2018-5221
No comments yet