RCE in Microsoft Office_snapshot_viewer_activex
CVE-2008-2463
The Microsoft Office Snapshot Viewer ActiveX control in snapview.ocx 10.0.5529.0, as distributed in the standalone Snapshot Viewer and Microsoft Office Access 2000 through 2003, allows remote attackers to download arbitrary files to a clie…
Vulnerability class: RCE (Remote Code Execution)
EPSS: 0.591 (99.0th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Office_snapshot_viewer_activex — versions office_2003, office_xp, office2000
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- cret@cert.org (US Government Resource, x_refsource_CERT, third-party-advisory)
- cret@cert.org (exploit, x_refsource_EXPLOIT-DB)
- cret@cert.org (US Government Resource, x_refsource_CERT, third-party-advisory)
- cret@cert.org (vdb-entry, x_refsource_VUPEN)
- cret@cert.org (x_refsource_HP, vendor-advisory)
- cret@cert.org (x_refsource_CONFIRM)
- cret@cert.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)
- cret@cert.org (x_refsource_SECUNIA, third-party-advisory)
- cret@cert.org (signature, x_refsource_OVAL, vdb-entry)
- cret@cert.org (vdb-entry, x_refsource_XF)
Frequently asked questions
- What is CVE-2008-2463?
- CVE-2008-2463 is a vulnerability in Microsoft Office_snapshot_viewer_activex, classified under Code Injection. Published 2008-07-07.
- Is CVE-2008-2463 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.