7.5high
CVE-2008-200011 exploit
activePDF WebGrabber ActiveX Control Buffer Overflow
Published 14 mo ago · modified 4 mo ago · JSON
CVSS
7.5
v4.0 · CNA
CISA KEV
No
not known exploited
EPSS
1.6%
percentile 76%
Public exploits
1
Metasploit
Summary
activePDF WebGrabber version 3.8.2.0 contains a stack-based buffer overflow vulnerability in the GetStatus() method of the APWebGrb.ocx ActiveX control. By passing an overly long string to this method, a remote attacker can execute arbitrary code in the context of the vulnerable process. Although the control is not marked safe for scripting, exploitation is possible via crafted HTML content in Internet Explorer under permissive security settings.
CISA SSVC assessment
- Exploitation
- Proof of concept public
- Automatable
- no
- Technical impact
- total
- Assessed
- 14 mo ago
Exploit prediction (EPSS)
1.58% probability of exploitation in the next 30 days, higher than 76% of all scored CVEs.
Exploits and detections
- Metasploit exploit/windows/fileformat/activepdf_webgrabber activePDF WebGrabber ActiveX Control Buffer Overflow · metasploit exploit, low rank · 2008-08-26
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| CNA | 4.0 | 7.5 | CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
| CNA | 4.0 | 7.5 | CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
Affected products
- activePDF WebGrabber
Classification
- Weakness
- CWE-121 Stack-based Buffer Overflow
References
- raw.githubusercontent.com /rapid7/metasploit-framework/master/modules/exploits/windows/fileformat/activepdf_webgrabb · exploit
- exploit-db.com /exploits/16635 · exploit
- web.archive.org /web/20081219180353/http://www.activepdf.com/products/serverproducts/webgrabber/ · product
- support.activepdf.com /support/solutions/35000139131 · product
- documentation.activepdf.com /WebGrabber_GS/b_installation/New_Installation.html · product
- vulncheck.com /advisories/activepdf-webgrabber-activex-control-buffer-overflow · third-party-advisory
Sources
- CVE List: CVE-2008-20001
- NVD: CVE-2008-20001
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.