CVE-2008-6496
published 2009-03-20CVE-2008-6496: Insecure method vulnerability in the VSPDFEditorX.VSPDFEdit ActiveX control in VSPDFEditorX.ocx 1.0.200.0 in VISAGESOFT eXPert PDF EditorX allows remote…
PriorityP345high8.8CVSS 2.0
AVNACMAuNCNICAC
EXPLOIT
EPSS
2.69%
84.0th percentile
Insecure method vulnerability in the VSPDFEditorX.VSPDFEdit ActiveX control in VSPDFEditorX.ocx 1.0.200.0 in VISAGESOFT eXPert PDF EditorX allows remote attackers to create or overwrite arbitrary files via the first argument to the extractPagesToFile method.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| visagesoft | expert_pdf_editorx | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No writeups or analysis indexed.
http://secunia.com/advisories/32990http://www.securityfocus.com/bid/32664https://exchange.xforce.ibmcloud.com/vulnerabilities/47166https://www.exploit-db.com/exploits/7358http://secunia.com/advisories/32990http://www.securityfocus.com/bid/32664https://exchange.xforce.ibmcloud.com/vulnerabilities/47166https://www.exploit-db.com/exploits/7358
2009-03-20
Published