medium4.3Public exploit code
CVE-2008-1933
Absolute path traversal vulnerability in a certain ActiveX control in Zune allows user-assisted remote attackers to overwrite arbitrary files via the SaveToFil…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Zune Software - ActiveX Arbitrary File Overwrite2008-04-23 · remote · windows · Verified
Impact
Absolute path traversal vulnerability in a certain ActiveX control in Zune allows user-assisted remote attackers to overwrite arbitrary files via the SaveToFile method. NOTE: the victim must explicitly allow the code to run.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Zune Software | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/archive/1/491231/100/0/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42028
- https://www.exploit-db.com/exploits/5489
- http://www.securityfocus.com/archive/1/491231/100/0/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42028
- https://www.exploit-db.com/exploits/5489