{"id":"CVE-2013-6040","aliases":["EUVD-2013-5870","GHSA-6mmp-f4p3-97mr"],"status":"published","title":"MW6 Aztec, DataMatrix, and MaxiCode ActiveX controls versions before 4.0 are vulnerable to arbitrary code via crafted HTML document.","description":"MW6 Aztec, DataMatrix, and MaxiCode ActiveX controls before version 4.0 vulnerable to arbitrary code via a crafted HTML document. Latest versions (4.0) of MW6 Aztec, DataMatrix, and MaxiCode ActiveX controls have resolved the issue","severity":{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.07373,"percentile":0.94456,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"published":"2014-01-21T01:00:00Z","modified":"2026-06-16T23:59:56Z","exploits":[{"source":"exploitdb","id":"EDB-31176","title":"MW6 Technologies Aztec - ActiveX 'Data' Buffer Overflow (PoC)","type":"dos","platform":"windows","date":"2014-01-24","url":"https://www.exploit-db.com/exploits/31176"},{"source":"exploitdb","id":"EDB-31177","title":"MW6 Technologies Datamatrix - ActiveX 'Data' Buffer Overflow","type":"dos","platform":"windows","date":"2014-01-24","url":"https://www.exploit-db.com/exploits/31177"},{"source":"exploitdb","id":"EDB-31178","title":"MW6 Technologies MaxiCode - ActiveX 'Data' Buffer Overflow (PoC)","type":"dos","platform":"windows","date":"2014-01-24","url":"https://www.exploit-db.com/exploits/31178"}],"products":[{"vendor":"mw6 tech","product":"mw6 aztec activex controls"},{"vendor":"mw6 tech","product":"mw6 datamatrix activex controls"},{"vendor":"mw6 tech","product":"mw6 maxicode activex controls"},{"vendor":"mw6tech","product":"aztec_activex_control"},{"vendor":"mw6tech","product":"datamatrix_activex_control"},{"vendor":"mw6tech","product":"maxicode_activex_control"}],"references":[{"url":"http://www.exploit-db.com/exploits/31176","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred","Exploit"]},{"url":"http://www.kb.cert.org/vuls/id/219470","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred","US Government Resource"]},{"url":"http://www.exploit-db.com/exploits/31177","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred","Exploit"]},{"url":"https://www.mw6tech.com"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-6040"},{"url":"https://github.com/advisories/GHSA-6mmp-f4p3-97mr"}],"sources":{"cve":[{"id":"CVE-2013-6040","title":"MW6 Aztec, DataMatrix, and MaxiCode ActiveX controls versions before 4.0 are vulnerable to arbitrary code via crafted HTML document.","description":"MW6 Aztec, DataMatrix, and MaxiCode ActiveX controls before version 4.0 vulnerable to arbitrary code via a crafted HTML document. Latest versions (4.0) of MW6 Aztec, DataMatrix, and MaxiCode ActiveX controls have resolved the issue","status":"published","published":"2014-01-21T01:00:00Z","modified":"2024-09-05T14:25:52.484Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"updated_at":"2026-11-02T14:34:57.195423Z"}],"euvd":[{"id":"EUVD-2013-5870","description":"MW6 Aztec, DataMatrix, and MaxiCode ActiveX controls before version 4.0 vulnerable to arbitrary code via a crafted HTML document. Latest versions (4.0) of MW6 Aztec, DataMatrix, and MaxiCode ActiveX controls have resolved the issue","status":"published","published":"2014-01-21T01:00:00Z","modified":"2024-09-05T14:25:52Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T00:56:03.195853Z"}],"ghsa":[{"id":"GHSA-6mmp-f4p3-97mr","title":"Multiple unspecified vulnerabilities in the MW6 Aztec, DataMatrix, and MaxiCode ActiveX controls...","description":"Multiple unspecified vulnerabilities in the MW6 Aztec, DataMatrix, and MaxiCode ActiveX controls allow remote attackers to execute arbitrary code via a crafted HTML document.","status":"published","published":"2022-05-17T04:10:14Z","modified":"2024-09-05T18:30:46Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T14:58:10.812405Z"}],"nvd":[{"id":"CVE-2013-6040","description":"MW6 Aztec, DataMatrix, and MaxiCode ActiveX controls before version 4.0 vulnerable to arbitrary code via a crafted HTML document. Latest versions (4.0) of MW6 Aztec, DataMatrix, and MaxiCode ActiveX controls have resolved the issue","status":"published","published":"2014-01-21T01:55:03.56Z","modified":"2026-06-16T23:59:56.113Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:02:48.062712Z"}]}}