9.3

CVE-2008-4453

Exploit
The GdPicture (1) Light Imaging Toolkit 4.7.1 GdPicture4S.Imaging ActiveX control (gdpicture4s.ocx) 4.7.0.1 and (2) Pro Imaging SDK 5.7.1 GdPicturePro5S.Imaging ActiveX control (gdpicturepro5s.ocx) 5.7.0.1 allows remote attackers to create, overwrite, and modify arbitrary files via the SaveAsPDF method.  NOTE: this issue might only be exploitable in limited environments or non-default browser settings.  NOTE: this can be leveraged for remote code execution by accessing files using hcp:// URLs.  NOTE: some of these details are obtained from third party information.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Dspicture ≫ Light Imaging Toolkit Version4.7.1
Dspicture ≫ Pro Imaging Sdk Version5.7.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 10.47% 0.952
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/31898
Vendor Advisory
http://secunia.com/advisories/31966
Vendor Advisory
http://securityreason.com/securityalert/4355
http://www.securityfocus.com/bid/31504
Patch
Exploit
http://www.vupen.com/english/advisories/2008/2708
https://exchange.xforce.ibmcloud.com/vulnerabilities/45536
https://www.exploit-db.com/exploits/6638