Improper input validation in Microsoft Windows Image Acquisition Logger
CVE-2008-3957
The Microsoft Windows Image Acquisition Logger ActiveX control allows remote attackers to force the download of arbitrary files onto a client system via a URL in the first argument to the Open method, in conjunction with a full destination pathname in the first argument to the Save method. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.178 (96.8th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Windows_image_acquisition_logger
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_MISC)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (Exploit, vdb-entry, x_refsource_BID)