PT-2008-6098 · Microsoft · Djvu Activex Control

Shahriyar Jalayeri · Publicado 2008-11-04 · Atualizado 2017-09-29 · CVE-2008-4922

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions DjVu ActiveX Control version 3.0 for Microsoft Office

Description The issue allows remote attackers to execute arbitrary code via a long ImageURL property, and possibly the Mode, Page, or Zoom properties. This is due to a buffer overflow in the DjVu ActiveX Control.

Recommendations For DjVu ActiveX Control version 3.0, consider disabling the control until a patch is available to prevent exploitation. Restrict access to the ImageURL, Mode, Page, and Zoom properties to minimize the risk of arbitrary code execution.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2008-4922

Produtos afetados

Djvu Activex Control

Referências · 8

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/djvu_imageurl.rb · Exploit
• 🔥 https://exploit-db.com/exploits/6878 · Exploit
• 🔥 https://exploit-db.com/exploits/16638 · Exploit
• http://vupen.com/english/advisories/2008/2956 · Nota
• http://securityfocus.com/bid/31987 · Nota
• http://securityreason.com/securityalert/4560 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46214 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-4922 · Nota de Segurança