DeltahackingTEAM has discovered some vulnerabilities in various MW6 Technologies ActiveX controls, which can be exploited by malicious people to overwrite arbitrary files.

The vulnerabilities are caused due to the following ActiveX controls including the insecure "SaveAsBMP()" and "SaveAsWMF()" methods:
* MW6PDF417Lib.PDF417 (MW6PDF417.dll)
* DATAMATRIXLib.MW6DataMatrix (DataMatrix.dll)
* BARCODELib.MW6Barcode (Barcode.dll)
* AZTECLib.MW6Aztec (Aztec.dll)

These can be exploited to overwrite and corrupt arbitrary files on the system, in the context of the currently logged-on user.

The vulnerabilities are confirmed in the following versions:
* MW6PDF417Lib.PDF417 3.0.0.1
* DATAMATRIXLib.MW6DataMatrix 3.0.0.1
* BARCODELib.MW6Barcode 3.0.0.1
* AZTECLib.MW6Aztec 3.0.0.1

Other versions may also be affected.

Solution
Set the kill-bit for the affected ActiveX controls.

Provided and/or discovered by
DeltahackingTEAM

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://milw0rm.com/exploits/6870
http://milw0rm.com/exploits/6871
http://milw0rm.com/exploits/6872
http://milw0rm.com/exploits/6873

Alternate/detailed remediation
Further details available in Customer Area

Deep Links
Links available to Secunia VIM customers