Описание
Insecure method vulnerability in VISAGESOFT eXPert PDF Viewer X ActiveX control (VSPDFViewerX.ocx) 3.0.990.0 allows remote attackers to overwrite arbitrary files via a full pathname to the savePageAsBitmap method.
Ссылки
- Vendor Advisory
- Exploit
- Vendor Advisory
- Exploit
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:visagesoft:expert_pdf_viewer_activex:3.0.990.0:*:*:*:*:*:*:*
EPSS
Процентиль: 90%
0.05681
Низкий
8.8 High
CVSS2
Дефекты
CWE-20
Связанные уязвимости
github
больше 3 лет назад
Insecure method vulnerability in VISAGESOFT eXPert PDF Viewer X ActiveX control (VSPDFViewerX.ocx) 3.0.990.0 allows remote attackers to overwrite arbitrary files via a full pathname to the savePageAsBitmap method.
EPSS
Процентиль: 90%
0.05681
Низкий
8.8 High
CVSS2
Дефекты
CWE-20