Lucene search
HistoryMar 20, 2009 - 12:30 a.m.
CVE-2008-6496
cve-2008-6496
vspdfeditorx
activex control
vulnerability
visagesoft
expert pdf editorx
remote attackers
arbitrary files
extractpagestofile method
8.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:N/I:C/A:C
7 High
AI Score
Confidence
Low
0.008 Low
EPSS
Percentile
81.1%
Insecure method vulnerability in the VSPDFEditorX.VSPDFEdit ActiveX control in VSPDFEditorX.ocx 1.0.200.0 in VISAGESOFT eXPert PDF EditorX allows remote attackers to create or overwrite arbitrary files via the first argument to the extractPagesToFile method.
Affected configurations
Node
visagesoftexpert_pdf_editorxMatch1.0.200.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| visagesoft:expert_pdf_editorx | visagesoft expert pdf editorx | eq | 1.0.200.0 |
Related
openvas
openvas
Expert PDF EditorX ActiveX File Overwrite Vulnerability
2009-03-26 00:00:00
Expert PDF EditorX ActiveX File Overwrite Vulnerability
2009-03-26 00:00:00
prion
prion
Security feature bypass
2009-03-20 00:30:00
nvd
nvd
CVE-2008-6496
2009-03-20 00:30:00
cvelist
cvelist
CVE-2008-6496
2009-03-20 00:00:00
8.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:N/I:C/A:C
7 High
AI Score
Confidence
Low
0.008 Low
EPSS
Percentile
81.1%
Related for CVE-2008-6496