CVE-2008-4922 Buffer overflow in the DjVu ActiveX Control 3.0 for Microsoft Office (DjVu_ActiveX_MSOffice.dll) allows remote attackers to execute arbitrary code via a long (1) ImageURL property, and possibly the (2...
HighCVSS 9.3
EPSS 32.7%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Buffer overflow in the DjVu ActiveX Control 3.0 for Microsoft Office (DjVu_ActiveX_MSOffice.dll) allows remote attackers to execute arbitrary code via a long (1) ImageURL property, and possibly the (2) Mode, (3) Page, or (4) Zoom properties.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| djvu activex control for microsoft office 2000 | All versions | No fix listed |
References
- 4560 third-party-advisory
- 31987 vdb-entry
- ADV-2008-2956 vdb-entry
- djvu-msoffice-activex-bo(46214) vdb-entry
- 6878 exploit