critical9.3Public exploit code
CVE-2008-4749
Multiple insecure method vulnerabilities in the VImpX.VImpAX ActiveX control (VImpX.ocx) 4.8.8.0 in DB Software Laboratory VImp X, possibly 4.7.7, allow remote…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- db Software Laboratory VImpX - 'VImpX.ocx' Multiple Vulnerabilities2008-10-24 · remote · windows · Verified
Impact
Multiple insecure method vulnerabilities in the VImpX.VImpAX ActiveX control (VImpX.ocx) 4.8.8.0 in DB Software Laboratory VImp X, possibly 4.7.7, allow remote attackers to overwrite arbitrary files via (1) the LogFile property and ClearLogFile method, and (2) the SaveToFile method.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Db Soft Lab | Vimp X | Version 4.8.8.0 |
References
- NVD record
- CVE.org record
- http://securityreason.com/securityalert/4509
- http://www.securityfocus.com/bid/31907
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46096
- https://www.exploit-db.com/exploits/6828
- http://securityreason.com/securityalert/4509
- http://www.securityfocus.com/bid/31907
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46096
- https://www.exploit-db.com/exploits/6828