National Cyber Awareness System

Vulnerability Summary for CVE-2008-2463

Overview

The Microsoft Office Snapshot Viewer ActiveX control in snapview.ocx 10.0.5529.0, as distributed in the standalone Snapshot Viewer and Microsoft Office Access 2000 through 2003, allows remote attackers to download arbitrary files to a client machine via a crafted HTML document or e-mail message, probably involving use of the SnapshotPath and CompressedPath properties and the PrintSnapshot method. NOTE: this can be leveraged for code execution by writing to a Startup folder.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

US-CERT Technical Alert: TA08-225A

Name: TA08-225A

Hyperlink:http://www.us-cert.gov/cas/techalerts/TA08-225A.html

US-CERT Technical Alert: TA08-189A

Name: TA08-189A

Hyperlink:http://www.us-cert.gov/cas/techalerts/TA08-189A.html

US-CERT Vulnerability Note: VU#837785

Name: VU#837785

Hyperlink:http://www.kb.cert.org/vuls/id/837785

External Source: XF

Name: microsoft-snapshotviewer-code-execution(43613)

Hyperlink:http://xforce.iss.net/xforce/xfdb/43613

External Source: VUPEN

Name: ADV-2008-2012

Hyperlink:http://www.vupen.com/english/advisories/2008/2012/references

External Source: SECTRACK

Name: 1020433

Hyperlink:http://www.securitytracker.com/id?1020433

External Source: BID

Name: 30114

Hyperlink:http://www.securityfocus.com/bid/30114

External Source: MILW0RM

Name: 6124

Hyperlink:http://www.milw0rm.com/exploits/6124

External Source: CONFIRM

Name: http://www.microsoft.com/technet/security/advisory/955179.mspx

Hyperlink:http://www.microsoft.com/technet/security/advisory/955179.mspx

External Source: EXPLOIT-DB

Name: 6124

Hyperlink:http://www.exploit-db.com/exploits/6124

External Source: SECUNIA

Name: 30883

Hyperlink:http://secunia.com/advisories/30883

External Source: OVAL

Name: oval:org.mitre.oval:def:6120

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:6120

External Source: HP

Name: SSRT080117

Hyperlink:http://marc.info/?l=bugtraq&m=121915960406986&w=2

External Source: HP

Name: SSRT080117

Hyperlink:http://marc.info/?l=bugtraq&m=121915960406986&w=2

References to Check Content

Identifier:oval:org.mitre.oval:def:6120

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:6120