What is CVE-2008-2463?

CVE-2008-2463 is a vulnerability in Microsoft Office Snapshot Viewer Activex, classified under Code Injection. Published 2008-07-07.

Is CVE-2008-2463 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

RCE in Microsoft Office Snapshot Viewer Activex

CVE-2008-2463

The Microsoft Office Snapshot Viewer ActiveX control in snapview.ocx 10.0.5529.0, as distributed in the standalone Snapshot Viewer and Microsoft Office Access 2000 through 2003, allows remote attackers to download arbitrary files to a client machine via a crafted HTML document or e-mail message, probably involving use of the SnapshotPath and CompressedPath properties and the PrintSnapshot method. NOTE: this can be leveraged for code execution by writing to a Startup folder.

Vulnerability class: RCE (Remote Code Execution)

Published 2008-07-07 · last modified 2026-06-16.

CVSS v2 metric

CVSS v2 base score 6.8 (Medium). Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P. This CVE predates CVSS v3 and has no v3 score from NVD.

EPSS exploit prediction

EPSS: 0.590 (99.1th percentile), scored 2026-10-20.

High probability of exploitation in the next 30 days — patch promptly. 99th percentile — 99.1% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.591 · newest: 0.590 · change: -0.001

Affected products

Microsoft Office Snapshot Viewer Activex — versions office_2003, office_xp, office2000

Weakness classification (CWE)

CWE-94 — Code Injection

Public proof-of-concept exploits

rapid7/metasploit-framework

References

www.us-cert.gov/cas/techalerts/TA08-189A.html (US Government Resource, third-party-advisory)
www.exploit-db.com/exploits/6124 (exploit)
www.us-cert.gov/cas/techalerts/TA08-225A.html (US Government Resource, third-party-advisory)
www.vupen.com/english/advisories/2008/2012/references (vdb-entry)
marc.info/ (vendor-advisory)
www.microsoft.com/technet/security/advisory/955179.mspx
www.kb.cert.org/vuls/id/837785 (US Government Resource, third-party-advisory)
secunia.com/advisories/30883 (third-party-advisory)
oval.cisecurity.org/repository/search/definition/oval:org.mitre.oval:def:6120 (signature, vdb-entry)
exchange.xforce.ibmcloud.com/vulnerabilities/43613 (vdb-entry)

Frequently asked questions

What is CVE-2008-2463?: CVE-2008-2463 is a vulnerability in Microsoft Office Snapshot Viewer Activex, classified under Code Injection. Published 2008-07-07.
Is CVE-2008-2463 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.