CVE-2008-6496 Insecure method vulnerability in the VSPDFEditorX.VSPDFEdit ActiveX control in VSPDFEditorX.ocx 1.0.200.0 in VISAGESOFT eXPert PDF EditorX allows remote attackers to create or overwrite arbitrary file...
HighCVSS 8.8
EPSS 2.7%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Insecure method vulnerability in the VSPDFEditorX.VSPDFEdit ActiveX control in VSPDFEditorX.ocx 1.0.200.0 in VISAGESOFT eXPert PDF EditorX allows remote attackers to create or overwrite arbitrary files via the first argument to the extractPagesToFile method.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| visagesoft expert pdf editorx | = 1.0.200.0 | No fix listed |
References
- 32990 third-party-advisory vendor-advisory
- 32664 exploit vdb-entry
- expertpdfeditorx-activex-file-overwrite(47166) vdb-entry
- 7358 exploit