Unscored severity · published Mar 20, 2009
CVE-2008-6496
Insecure method vulnerability in the VSPDFEditorX.VSPDFEdit ActiveX control in VSPDFEditorX.ocx 1.0.200.0 in VISAGESOFT eXPert PDF EditorX allows remote attackers to create or…
–
CVSS
2.7%
EPSS
No
On KEV
Description
Insecure method vulnerability in the VSPDFEditorX.VSPDFEdit ActiveX control in VSPDFEditorX.ocx 1.0.200.0 in VISAGESOFT eXPert PDF EditorX allows remote attackers to create or overwrite arbitrary files via the first argument to the extractPagesToFile method.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.7% · higher than 86% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EP
Expert Pdf Editorx · Visagesoft
1.0.200.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-6496
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-6496
Vendor Advisory
http://secunia.com/advisories/32990
Exploit
http://www.securityfocus.com/bid/32664
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/47166
www.exploit-db.com
https://www.exploit-db.com/exploits/7358