high8.8Public exploit code
CVE-2008-4919
Insecure method vulnerability in VISAGESOFT eXPert PDF Viewer X ActiveX control (VSPDFViewerX.ocx) 3.0.990.0 allows remote attackers to overwrite arbitrary fil…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Visagesoft eXPert PDF ViewerX - 'VSPDFViewerX.ocx' File Overwrite2008-10-29 · remote · windows · Verified
Impact
Insecure method vulnerability in VISAGESOFT eXPert PDF Viewer X ActiveX control (VSPDFViewerX.ocx) 3.0.990.0 allows remote attackers to overwrite arbitrary files via a full pathname to the savePageAsBitmap method.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Visagesoft | Expert Pdf Viewer Activex | Version 3.0.990.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/32426
- http://securityreason.com/securityalert/4558
- http://www.securityfocus.com/bid/31984
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46218
- https://www.exploit-db.com/exploits/6875
- http://secunia.com/advisories/32426
- http://securityreason.com/securityalert/4558
- http://www.securityfocus.com/bid/31984
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46218
- https://www.exploit-db.com/exploits/6875