CVE-2008-6496

Insecure method vulnerability in the VSPDFEditorX.VSPDFEdit ActiveX control in VSPDFEditorX.ocx 1.0.200.0 in VISAGESOFT eXPert PDF EditorX allows remote attackers to create or overwrite arbitrary files via the first argument to the extractPagesToFile method.

CVSS v2.0 8.8 HIGH

8.8^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:M/Au:N/C:N/I:C/A:C

Exploitability : 8.6 / Impact : 9.2

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact NONE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://secunia.com/advisories/32990	Vendor Advisory
http://www.securityfocus.com/bid/32664	Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/47166
https://www.exploit-db.com/exploits/7358
http://secunia.com/advisories/32990	Vendor Advisory
http://www.securityfocus.com/bid/32664	Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/47166
https://www.exploit-db.com/exploits/7358

Configurations

Configuration 1 (hide)

cpe:2.3:a:visagesoft:expert_pdf_editorx:1.0.200.0:*:*:*:*:*:*:*

History

21 Nov 2024, 00:56

Type	Values Removed	Values Added
References	~~() http://secunia.com/advisories/32990 - Vendor Advisory~~	() http://secunia.com/advisories/32990 - Vendor Advisory
References	~~() http://www.securityfocus.com/bid/32664 - Exploit~~	() http://www.securityfocus.com/bid/32664 - Exploit
References	~~() https://exchange.xforce.ibmcloud.com/vulnerabilities/47166 -~~	() https://exchange.xforce.ibmcloud.com/vulnerabilities/47166 -
References	~~() https://www.exploit-db.com/exploits/7358 -~~	() https://www.exploit-db.com/exploits/7358 -

Information

Published : 2009-03-20 00:30

Updated : 2024-11-21 00:56

NVD link : CVE-2008-6496

Mitre link : CVE-2008-6496

CVE.ORG link : CVE-2008-6496

JSON object : View

Products Affected

visagesoft

expert_pdf_editorx

CWE

CWE-264

Permissions, Privileges, and Access Controls

{"id": "CVE-2008-6496", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 8.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "MEDIUM", "availabilityImpact": "COMPLETE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 9.2, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}]}, "published": "2009-03-20T00:30:00.437", "references": [{"url": "http://secunia.com/advisories/32990", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/32664", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47166", "source": "cve@mitre.org"}, {"url": "https://www.exploit-db.com/exploits/7358", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/32990", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/32664", "tags": ["Exploit"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47166", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.exploit-db.com/exploits/7358", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-264"}]}], "descriptions": [{"lang": "en", "value": "Insecure method vulnerability in the VSPDFEditorX.VSPDFEdit ActiveX control in VSPDFEditorX.ocx 1.0.200.0 in VISAGESOFT eXPert PDF EditorX allows remote attackers to create or overwrite arbitrary files via the first argument to the extractPagesToFile method."}, {"lang": "es", "value": "Vulnerabilidad de m\u00e9todo inseguro en el control ActiveX VSPDFEditorX.VSPDFEdit en VSPDFEditorX.ocx v1.0.200.0 en VISAGESOFT eXPert PDF EditorX permite a atacantes remotos crear o sobre escribir ficheros de su elecci\u00f3n a trav\u00e9s de un primer argumento del m\u00e9todo extractPagesToFile."}], "lastModified": "2024-11-21T00:56:41.093", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:visagesoft:expert_pdf_editorx:1.0.200.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D2266812-D642-4BDB-B52E-EC244704617F"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}