NVD

Id
3819  
Name
CVE-2008-3957  
Description
The Microsoft Windows Image Acquisition Logger ActiveX control allows remote attackers to force the download of arbitrary files onto a client system via a URL in the first argument to the Open method, in conjunction with a full destination pathname in the first argument to the Save method. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-09-10  
Modified Date
2008-09-17  
Seq
2008-3957  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
24186 3819 CVE-2008-3957 31069  View
24187 3819 CVE-2008-3957 http://www.securityfocus.com/data/vulnerabilities/exploits/31069  View
24188 3819 CVE-2008-3957 win-image-logger-file-overwrite(45015)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
49524 JVNDB-2008-004834 Microsoft Windows Image Acquisition Logger ActiveX コントロールにおけるファイルを強制的にダウンロードされる脆弱性 Microsoft Windows Image Acquisition Logger ActiveX コントロールには、クライアントのシステム上へ任意のファイルを強制的にダウンロードされる脆弱性が存在します。 CVE-2008-3957 34070 CVE-2008-3957 3819 9.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004834.html 2008-09-10 2012-09-25 View