CVE-2008-4919 – Visagesoft eXPert PDF ViewerX - 'VSPDFViewerX.ocx' File Overwrite

https://notcve.org/view.php?id=CVE-2008-4919

Insecure method vulnerability in VISAGESOFT eXPert PDF Viewer X ActiveX control (VSPDFViewerX.ocx) 3.0.990.0 allows remote attackers to overwrite arbitrary files via a full pathname to the savePageAsBitmap method. Vulnerabilidad de método no seguro en el control ActiveX de VISAGESOFT eXPert PDF Viewer X (VSPDFViewerX.ocx) v3.0.990.0; permite a atacantes remotos sobrescribir ficheros de su elección a través de un nombre de ruta completo al método savePageAsBitmap. • https://www.exploit-db.com/exploits/6875 http://secunia.com/advisories/32426 http://securityreason.com/securityalert/4558 http://www.securityfocus.com/bid/31984 https://exchange.xforce.ibmcloud.com/vulnerabilities/46218 • CWE-20: Improper Input Validation •