CVE-2008-4919

NONE

Published Nov 4, 200817y ago · Modified Jun 16, 20262w ago

Published Nov 4, 2008 17y ago

Last Modified Jun 16, 2026 2w ago

Description

Insecure method vulnerability in VISAGESOFT eXPert PDF Viewer X ActiveX control (VSPDFViewerX.ocx) 3.0.990.0 allows remote attackers to overwrite arbitrary files via a full pathname to the savePageAsBitmap method.

Threat Intelligence

No active exploitation signals — not in CISA KEV and no EPSS score yet.

Exploit & Patch Status

Public Exploit Known

No Patch Available

Weaknesses 1

CWE-20 Improper Input Validation Validation

Affected Products 1

Vendor	Product	Version	Range
visagesoft	expert_pdf_viewer_activex	3.0.990.0	any

References 5

secunia.com http://secunia.com/advisories/32426

Vendor Advisory
securityreason.com http://securityreason.com/securityalert/4558

Exploit
securityfocus.com http://www.securityfocus.com/bid/31984
exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/46218
exploit-db.com https://www.exploit-db.com/exploits/6875

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.