Published: 07/07/2008 Updated: 29/09/2017

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

VMScore: 690

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

The Microsoft Office Snapshot Viewer ActiveX control in snapview.ocx 10.0.5529.0, as distributed in the standalone Snapshot Viewer and Microsoft Office Access 2000 through 2003, allows remote malicious users to download arbitrary files to a client machine via a crafted HTML document or e-mail message, probably involving use of the SnapshotPath and CompressedPath properties and the PrintSnapshot method. NOTE: this can be leveraged for code execution by writing to a Startup folder.

Vulnerable Product	Search on Vulmon	Subscribe to Product
microsoft office snapshot viewer activex office2000
microsoft office snapshot viewer activex office_2003
microsoft office snapshot viewer activex office_xp

/* Microsoft Access Snapshot Viewer ActiveX Control Exploit Ms-Access SnapShot Exploit Snapviewocx v 10055290 Download nice binaries into an arbitrary box Vulnerability discovered by Oliver Lavery wwwsecurityfocuscom/bid/8536/info Remote: Yes greetz to str0ke */ #include <stdioh> #include <stdlibh> # ...

## # $Id: ms08_041_snapshotviewerrb 10394 2010-09-20 08:06:27Z jduck $ ## ## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions Please see the Metasploit # Framework web site for more information on licensing and terms of use # metasploitcom/framework/ ## require 'msf/core ...

CWE-94 http://www.microsoft.com/technet/security/advisory/955179.mspx http://www.kb.cert.org/vuls/id/837785 http://secunia.com/advisories/30883 http://www.securitytracker.com/id?1020433 http://marc.info/?l=bugtraq&m=121915960406986&w=2 http://www.securityfocus.com/bid/30114 http://www.us-cert.gov/cas/techalerts/TA08-189A.html http://www.us-cert.gov/cas/techalerts/TA08-225A.html http://www.vupen.com/english/advisories/2008/2012/references http://www.exploit-db.com/exploits/6124 https://exchange.xforce.ibmcloud.com/vulnerabilities/43613 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6120 https://nvd.nist.gov https://www.exploit-db.com/exploits/6124/https://www.kb.cert.org/vuls/id/837785

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2008-2463

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect