CVE-2008-3957 The Microsoft Windows Image Acquisition Logger ActiveX control allows remote attackers to force the download of arbitrary files onto a client system via a URL in the first argument to the Open method,...
HighCVSS 9.3
EPSS 17.8%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The Microsoft Windows Image Acquisition Logger ActiveX control allows remote attackers to force the download of arbitrary files onto a client system via a URL in the first argument to the Open method, in conjunction with a full destination pathname in the first argument to the Save method. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft windows image acquisition logger | All versions | No fix listed |
References
- 31069 exploit vdb-entry
- www.securityfocus.com
- win-image-logger-file-overwrite(45015) vdb-entry