PT-2008-6098 · Microsoft · Djvu Activex Control

Shahriyar Jalayeri · Published 2008-11-04 · Updated 2017-09-29 · CVE-2008-4922

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions DjVu ActiveX Control version 3.0 for Microsoft Office

Description The issue allows remote attackers to execute arbitrary code via a long ImageURL property, and possibly the Mode, Page, or Zoom properties. This is due to a buffer overflow in the DjVu ActiveX Control.

Recommendations For DjVu ActiveX Control version 3.0, consider disabling the control until a patch is available to prevent exploitation. Restrict access to the ImageURL, Mode, Page, and Zoom properties to minimize the risk of arbitrary code execution.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2008-4922

Affected Products

Djvu Activex Control

References · 8

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/djvu_imageurl.rb · Exploit
• 🔥 https://exploit-db.com/exploits/6878 · Exploit
• 🔥 https://exploit-db.com/exploits/16638 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-4922 · Security Note
• http://vupen.com/english/advisories/2008/2956 · Note
• http://securityfocus.com/bid/31987 · Note
• http://securityreason.com/securityalert/4560 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46214 · Note