CVE-2008-1898

Exploit

EPSS 77.39%
Veröffentlicht 21.04.2008 17:05:00
Zuletzt bearbeitet 23.04.2026 00:35:47
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

A certain ActiveX control in WkImgSrv.dll 7.03.0616.0, as distributed in Microsoft Works 7 and Microsoft Office 2003 and 2007, allows remote attackers to execute arbitrary code or cause a denial of service (browser crash) via an invalid WksPictureInterface property value, which triggers an improper function call.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 10

NVD 3 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Microsoft ≫ Office Version2003

Microsoft ≫ Office Version2007

Microsoft ≫ Works Version7.0

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	77.39%	0.989

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://archives.neohapsis.com/archives/fulldisclosure/2008-05/0029.html

Exploit

http://blogs.technet.com/swi/archive/2008/06/05/why-there-wont-be-a-security-update-for-wkimgsrv-dll.aspx

http://www.securityfocus.com/archive/1/491027/100/0/threaded

http://www.securityfocus.com/bid/28820

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/41876

https://www.exploit-db.com/exploits/5460

https://www.exploit-db.com/exploits/5530

https://nvd.nist.gov/vuln/detail/CVE-2008-1898

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2008-1898

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2008-1898

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2008-1898