CVE-2007-2644
A certain ActiveX control in Morovia Barcode ActiveX Professional 3.3.1304 allows remote...
A certain ActiveX control in Morovia Barcode ActiveX Professional 3.3.1304 allows remote attackers to overwrite arbitrary files by calling the Save method with an arbitrary filename.
Exploit likelihood
What each source reports
NVD Score used
9.4
A certain ActiveX control in Morovia Barcode ActiveX Professional 3.3.1304 allows remote attackers to overwrite arbitrary files by calling the Save method with an arbitrary filename.
- Record
CVE-2007-2644- CVSS 2.0
- 9.4 High
AV:N/AC:L/Au:N/C:N/I:C/A:C - Updated
- 2026-11-02
CVE List No score
A certain ActiveX control in Morovia Barcode ActiveX Professional 3.3.1304 allows remote attackers to overwrite arbitrary files by calling the Save method with an arbitrary filename.
- Record
CVE-2007-2644- Updated
- 2026-11-02
EUVDEUVD-2007-2636 No score
A certain ActiveX control in Morovia Barcode ActiveX Professional 3.3.1304 allows remote attackers to overwrite arbitrary files by calling the Save method with an arbitrary filename.
- Record
EUVD-2007-2636- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-58xq-rpm3-xwc2 No score
A certain ActiveX control in Morovia Barcode ActiveX Professional 3.3.1304 allows remote...
A certain ActiveX control in Morovia Barcode ActiveX Professional 3.3.1304 allows remote attackers to overwrite arbitrary files by calling the Save method with an arbitrary filename.
- Record
GHSA-58xq-rpm3-xwc2- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Morovia Barcode ActiveX Professional 3.3.1304 - Arbitrary File Overwrite | 2007-05-11 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| aliases, exploits, facts, references, title | Exploit-DB, GitHub Advisories | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-2644 is a high vulnerability (CVSS 9.4) in Morovia Barcode Activex Control, published May 13, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 4.65%, the 91st percentile. No source names a fixed version.
References
shinnai.altervista.org/viewtopic.php?id=42&t_id=13
moaxb.blogspot.com/2007/05/morovia-barcode-activex-professional.html
exploit-db.com/exploits/3899
osvdb.org/37786
exchange.xforce.ibmcloud.com/vulnerabilities/34248
securityfocus.com/bid/23934
nvd.nist.gov/vuln/detail/CVE-2007-2644
github.com/advisories/GHSA-58xq-rpm3-xwc2