NVD

Id
4276  
Name
CVE-2008-4453  
Description
The GdPicture (1) Light Imaging Toolkit 4.7.1 GdPicture4S.Imaging ActiveX control (gdpicture4s.ocx) 4.7.0.1 and (2) Pro Imaging SDK 5.7.1 GdPicturePro5S.Imaging ActiveX control (gdpicturepro5s.ocx) 5.7.0.1 allows remote attackers to create, overwrite, and modify arbitrary files via the SaveAsPDF method. NOTE: this issue might only be exploitable in limited environments or non-default browser settings. NOTE: this can be leveraged for remote code execution by accessing files using hcp:// URLs. NOTE: some of these details are obtained from third party information.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-10-06  
Modified Date
2011-03-07  
Seq
2008-4453  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
27116 4276 CVE-2008-4453 4355  View
27117 4276 CVE-2008-4453 6638  View
27118 4276 CVE-2008-4453 31504  View
27119 4276 CVE-2008-4453 ADV-2008-2708  View
27120 4276 CVE-2008-4453 gdpicture-saveaspdf-file-overwrite(45536)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
48197 JVNDB-2008-003507 GdPicture Light Imaging Toolkit の GdPicture4S.Imaging ActiveX コントロールなどにおける任意のファイルを変更される脆弱性 (1) GdPicture Light Imaging Toolkit の GdPicture4S.Imaging ActiveX コントロール (gdpicture4s.ocx)、および (2) Pro Imaging SDK の GdPicturePro5S.Imaging ActiveX コントロール (gdpicturepro5s.ocx) には、任意のファイルを作成し、上書きされる、および変更される脆弱性が存在します。 CVE-2008-4453 34566 CVE-2008-4453 4276 9.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-003507.html 2008-10-06 2012-06-26 View