CVE-2008-4919 Insecure method vulnerability in VISAGESOFT eXPert PDF Viewer X ActiveX control (VSPDFViewerX.ocx) 3.0.990.0 allows remote attackers to overwrite arbitrary files via a full pathname to the savePageAsB...
HighCVSS 8.8
EPSS 2.8%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Insecure method vulnerability in VISAGESOFT eXPert PDF Viewer X ActiveX control (VSPDFViewerX.ocx) 3.0.990.0 allows remote attackers to overwrite arbitrary files via a full pathname to the savePageAsBitmap method.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| visagesoft expert pdf viewer activex | = 3.0.990.0 | No fix listed |
References
- 32426 third-party-advisory vendor-advisory
- 4558 exploit third-party-advisory
- 31984 vdb-entry
- expertpdfviewerx-activex-file-overwrite(46218) vdb-entry
- 6875 exploit