RCE in Microsoft Office Snapshot Viewer Activex
CVE-2008-2463
The Microsoft Office Snapshot Viewer ActiveX control in snapview.ocx 10.0.5529.0, as distributed in the standalone Snapshot Viewer and Microsoft Office Access 2000 through 2003, allows remote attackers to download arbitrary files to a client machine via a crafted HTML document or e-mail message, probably involving use of the SnapshotPath and CompressedPath properties and the PrintSnapshot method. NOTE: this can be leveraged for code execution by writing to a Startup folder.
Vulnerability class: RCE (Remote Code Execution)
EPSS: 0.591 (99.0th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Office_snapshot_viewer_activex — versions office_2003, office_xp, office2000
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- cret@cert.org (US Government Resource, x_refsource_CERT, third-party-advisory)
- cret@cert.org (exploit, x_refsource_EXPLOIT-DB)
- cret@cert.org (US Government Resource, x_refsource_CERT, third-party-advisory)
- cret@cert.org (vdb-entry, x_refsource_VUPEN)
- cret@cert.org (x_refsource_HP, vendor-advisory)
- cret@cert.org (x_refsource_CONFIRM)
- cret@cert.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)
- cret@cert.org (x_refsource_SECUNIA, third-party-advisory)
- cret@cert.org (signature, x_refsource_OVAL, vdb-entry)
- cret@cert.org (vdb-entry, x_refsource_XF)
Frequently asked questions
- What is CVE-2008-2463?
- CVE-2008-2463 is a vulnerability in Microsoft Office Snapshot Viewer Activex, classified under Code Injection. Published 2008-07-07.
- Is CVE-2008-2463 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.