CVE-2008-4749 Multiple insecure method vulnerabilities in the VImpX.VImpAX ActiveX control (VImpX.ocx) 4.8.8.0 in DB Software Laboratory VImp X, possibly 4.7.7, allow remote attackers to overwrite arbitrary files v...
HighCVSS 9.3
EPSS 3.0%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple insecure method vulnerabilities in the VImpX.VImpAX ActiveX control (VImpX.ocx) 4.8.8.0 in DB Software Laboratory VImp X, possibly 4.7.7, allow remote attackers to overwrite arbitrary files via (1) the LogFile property and ClearLogFile method, and (2) the SaveToFile method.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| db soft lab vimp x | = 4.8.8.0 | No fix listed |
References
- 4509 third-party-advisory
- 31907 vdb-entry
- db-activex-vimpx-file-overwrite(46096) vdb-entry
- 6828 exploit