critical9.3Public exploit code
CVE-2008-4922
Buffer overflow in the DjVu ActiveX Control 3.0 for Microsoft Office (DjVu_ActiveX_MSOffice.dll) allows remote attackers to execute arbitrary code via a long (…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- DjVu - 'DjVu_ActiveX_MSOffice.dll' ActiveX Component Buffer Overflow (Metasploit)2010-09-25 · remote · windows · Verified
- DjVu - ActiveX Control 3.0 ImageURL Property Overflow2008-10-30 · remote · windows · Verified
Impact
Buffer overflow in the DjVu ActiveX Control 3.0 for Microsoft Office (DjVu_ActiveX_MSOffice.dll) allows remote attackers to execute arbitrary code via a long (1) ImageURL property, and possibly the (2) Mode, (3) Page, or (4) Zoom properties.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Djvu | Activex Control For Microsoft Office 2000 | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://securityreason.com/securityalert/4560
- http://www.securityfocus.com/bid/31987
- http://www.vupen.com/english/advisories/2008/2956
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46214
- https://www.exploit-db.com/exploits/6878
- http://securityreason.com/securityalert/4560
- http://www.securityfocus.com/bid/31987
- http://www.vupen.com/english/advisories/2008/2956
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46214
- https://www.exploit-db.com/exploits/6878