DjVu DjVu_ActiveX_MSOffice.dll ActiveX ComponentBuffer Overflow

This module exploits a stack buffer overflow in DjVu ActiveX Component. When sending an overly long string to the ImageURL property of DjVuActiveXMSOffice.dll 3.0 an attacker may be able to execute arbitrary code. This control is not marked safe for scripting, so choose your attack vector...

CVE-2008-4922

CVE-2008-4922 describes a buffer overflow in the DjVu ActiveX Control 3.0 for Microsoft Office (DjVu_ActiveX_MSOffice.dll). An overly long string to the ImageURL() property (and possibly the Mode, Page, or Zoom properties) can allow remote code execution. The connected sources confirm the affecte...

CVE-2008-4922

creationtimestamp| type| source ---|---|--- 2008-10-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6878 2010-09-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16638 2018-05-29 15:50:33+00:00| seen|...