HIGH · 8.8

CVE-2008-4919

Insecure method vulnerability in VISAGESOFT eXPert PDF Viewer X ActiveX control (VSPDFViewerX.ocx) 3.0.990.0 allows remote attackers to overwrite arbitrary files via a full pathname to the savePageAsB...

Vulnerability Description

Insecure method vulnerability in VISAGESOFT eXPert PDF Viewer X ActiveX control (VSPDFViewerX.ocx) 3.0.990.0 allows remote attackers to overwrite arbitrary files via a full pathname to the savePageAsBitmap method.

CVSS Score

8.8

HIGH

AV:N/AC:M/Au:N/C:N/I:C/A:C
Confidentiality
NONE
Integrity
COMPLETE
Availability
COMPLETE

Affected Products

VendorProductVersions
VisagesoftExpert Pdf Viewer Activex3.0.990.0

Related Weaknesses (CWE)

References

FAQ

What is CVE-2008-4919?

CVE-2008-4919 is a vulnerability with a CVSS score of 8.8 (HIGH). Insecure method vulnerability in VISAGESOFT eXPert PDF Viewer X ActiveX control (VSPDFViewerX.ocx) 3.0.990.0 allows remote attackers to overwrite arbitrary files via a full pathname to the savePageAsB...

How severe is CVE-2008-4919?

CVE-2008-4919 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2008-4919?

Check the references section above for vendor advisories and patch information. Affected products include: Visagesoft Expert Pdf Viewer Activex.