What is CVE-2008-4922?

CVE-2008-4922 is a vulnerability in N/a. Published 2008-11-04.

Is CVE-2008-4922 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in N/a

CVE-2008-4922

Buffer overflow in the DjVu ActiveX Control 3.0 for Microsoft Office (DjVu_ActiveX_MSOffice.dll) allows remote attackers to execute arbitrary code via a long (1) ImageURL property, and possibly the (2) Mode, (3) Page, or (4) Zoom propertie…

EPSS: 0.671 (98.6th percentile) — read the EPSS interpretation.

Affected products

N/a — versions n/a

Public proof-of-concept exploits

rapid7/metasploit-framework

References

6878 (exploit, x_refsource_EXPLOIT-DB)
31987 (vdb-entry, x_refsource_BID)
4560 (x_refsource_SREASON, third-party-advisory)
djvu-msoffice-activex-bo(46214) (vdb-entry, x_refsource_XF)
ADV-2008-2956 (vdb-entry, x_refsource_VUPEN)

Frequently asked questions

What is CVE-2008-4922?: CVE-2008-4922 is a vulnerability in N/a. Published 2008-11-04.
Is CVE-2008-4922 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.