What’s Vulnerable › Vulnerabilities

CVE-2013-6040: MW6 Aztec, DataMatrix, and MaxiCode ActiveX controls versions before 4.0 are vulnerable to arbitrary code via crafted HTML document.

• Severity: critical (CVSS 9.3 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 7.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2014-01-21 · updated 2026-06-16

Description

MW6 Aztec, DataMatrix, and MaxiCode ActiveX controls before version 4.0 vulnerable to arbitrary code via a crafted HTML document. Latest versions (4.0) of MW6 Aztec, DataMatrix, and MaxiCode ActiveX controls have resolved the issue

Affected products

• Mw6Tech Aztec Activex Control: all versions
• Mw6Tech Datamatrix Activex Control: all versions
• Mw6Tech Maxicode Activex Control: all versions

References

• http://www.exploit-db.com/exploits/31176
• http://www.exploit-db.com/exploits/31177
• http://www.kb.cert.org/vuls/id/219470
• https://www.mw6tech.com
• http://www.exploit-db.com/exploits/31176
• http://www.exploit-db.com/exploits/31177
• http://www.kb.cert.org/vuls/id/219470

Get alerted when CVE-2013-6040 or the next vulnerability affects your stack