CVEvulnerability
CVE-2008-4453
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-10-06
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
The GdPicture (1) Light Imaging Toolkit 4.7.1 GdPicture4S.Imaging ActiveX control (gdpicture4s.ocx) 4.7.0.1 and (2) Pro Imaging SDK 5.7.1 GdPicturePro5S.Imaging ActiveX control (gdpicturepro5s.ocx) 5.7.0.1 allows remote attackers to create, overwrite, and modify arbitrary files via the SaveAsPDF method. NOTE: this issue might only be exploitable in limited environments or non-default browser settings. NOTE: this can be leveraged for remote code execution by accessing files using hcp:// URLs. NOTE: some of these details are obtained from third party information.
Affected configurations
• dspicture light imaging toolkit 4.7.1
• dspicture pro imaging sdk 5.7.1
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/31898 Vendor Advisory
- http://secunia.com/advisories/31966 Vendor Advisory
- http://securityreason.com/securityalert/4355 securityreason.com
- http://www.securityfocus.com/bid/31504 Exploit, Patch
- http://www.vupen.com/english/advisories/2008/2708 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45536 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/6638 www.exploit-db.com
- http://secunia.com/advisories/31898 Vendor Advisory
- http://secunia.com/advisories/31966 Vendor Advisory
- http://securityreason.com/securityalert/4355 securityreason.com
- http://www.securityfocus.com/bid/31504 Exploit, Patch
- http://www.vupen.com/english/advisories/2008/2708 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45536 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/6638 www.exploit-db.com