8.8high
CVE-2008-64961 exploit
Insecure method vulnerability in the VSPDFEditorX.VSPDFEdit ActiveX control in VSPDFEditorX.ocx 1.0.200.0 in VISAGESOFT eXPert PDF EditorX…
Published 17 y ago · modified 4 mo ago · JSON
CVSS
8.8
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
2.7%
percentile 86%
Public exploits
1
Exploit-DB
Summary
Insecure method vulnerability in the VSPDFEditorX.VSPDFEdit ActiveX control in VSPDFEditorX.ocx 1.0.200.0 in VISAGESOFT eXPert PDF EditorX allows remote attackers to create or overwrite arbitrary files via the first argument to the extractPagesToFile method.
Exploit prediction (EPSS)
2.69% probability of exploitation in the next 30 days, higher than 86% of all scored CVEs.
Exploits and detections
- EDB-7358 Visagesoft eXPert PDF EditorX - 'VSPDFEditorX.ocx' Insecure Method · dos · 2008-12-05
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 2.0 | 8.8 | AV:N/AC:M/Au:N/C:N/I:C/A:C |
Classification
- Weakness
- CWE-264 Permissions, Privileges, and Access Controls
References
- exploit-db.com /exploits/7358 · exploit, x_refsource_EXPLOIT-DB, x_transferred
- secunia.com /advisories/32990 · third-party-advisory, x_refsource_SECUNIA, x_transferred
- exchange.xforce.ibmcloud.com /vulnerabilities/47166 · vdb-entry, x_refsource_XF, x_transferred
- securityfocus.com /bid/32664 · vdb-entry, x_refsource_BID, x_transferred
Sources
- CVE List: CVE-2008-6496
- NVD: CVE-2008-6496
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.