QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2008-2463

Back to search

CVE-2008-2463

Published: Jul 7, 2008

Modified: Aug 7, 2024

PUBLISHED

Description

The Microsoft Office Snapshot Viewer ActiveX control in snapview.ocx 10.0.5529.0, as distributed in the standalone Snapshot Viewer and Microsoft Office Access 2000 through 2003, allows remote attackers to download arbitrary files to a client machine via a crafted HTML document or e-mail message, probably involving use of the SnapshotPath and CompressedPath properties and the PrintSnapshot method. NOTE: this can be leveraged for code execution by writing to a Startup folder.

VendorProductVersions

n/a

n/a

affected
n/a

References

TA08-189A
third-party-advisory
x_refsource_CERT
6124
exploit
x_refsource_EXPLOIT-DB
TA08-225A
third-party-advisory
x_refsource_CERT
ADV-2008-2012
vdb-entry
x_refsource_VUPEN
HPSBST02360
vendor-advisory
x_refsource_HP
SSRT080117
vendor-advisory
x_refsource_HP
VU#837785
third-party-advisory
x_refsource_CERT-VN
30883
third-party-advisory
x_refsource_SECUNIA
oval:org.mitre.oval:def:6120
vdb-entry
signature
x_refsource_OVAL
30114
vdb-entry
x_refsource_BID
1020433
vdb-entry
x_refsource_SECTRACK

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now