CVE-2008-4471
published 2008-10-07CVE-2008-4471: Directory traversal vulnerability in the CExpressViewerControl class in the DWF Viewer ActiveX control (AdView.dll 9.0.0.96), as used in Revit Architecture…
PriorityP348critical9.3CVSS 2.0
AVNACMAuNCCICAC
EXPLOIT
EPSS
6.73%
93.1th percentile
Directory traversal vulnerability in the CExpressViewerControl class in the DWF Viewer ActiveX control (AdView.dll 9.0.0.96), as used in Revit Architecture 2009 SP2 and Autodesk Design Review 2009, allows remote attackers to overwrite arbitrary files via "..\" sequences in the argument to the SaveAS method.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| autodesk | design_review | — | — |
| autodesk | revit_architecture | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No writeups or analysis indexed.
http://retrogod.altervista.org/9sg_autodesk_revit_arch_2009_exploit.htmlhttp://secunia.com/advisories/31989http://securityreason.com/securityalert/4361http://www.securityfocus.com/archive/1/496847/100/0/threadedhttp://www.securityfocus.com/bid/31487http://www.vupen.com/english/advisories/2008/2704https://exchange.xforce.ibmcloud.com/vulnerabilities/45519https://www.exploit-db.com/exploits/6630http://retrogod.altervista.org/9sg_autodesk_revit_arch_2009_exploit.htmlhttp://secunia.com/advisories/31989http://securityreason.com/securityalert/4361http://www.securityfocus.com/archive/1/496847/100/0/threadedhttp://www.securityfocus.com/bid/31487http://www.vupen.com/english/advisories/2008/2704https://exchange.xforce.ibmcloud.com/vulnerabilities/45519https://www.exploit-db.com/exploits/6630
2008-10-07
Published