CVE-2008-4922

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

32.75%

Published

Nov 4, 2008

Modified

Apr 22, 2026

Public PoC / Exploit (3)

All weaponized →

Exploit-DBDjVu - 'DjVu_ActiveX_MSOffice.dll' ActiveX Component Buffer Overflow (Metasploit)Exploit-DBDjVu - ActiveX Control 3.0 ImageURL Property Overflow TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Buffer overflow in the DjVu ActiveX Control 3.0 for Microsoft Office (DjVu_ActiveX_MSOffice.dll) allows remote attackers to execute arbitrary code via a long (1) ImageURL property, and possibly the (2) Mode, (3) Page, or (4) Zoom properties.

Weaknesses (CWE)

CWE-119

Affected Products (2)

djvu · activex_control_for_microsoft_office_2000vulnerable

microsoft · office

References (10)

http://securityreason.com/securityalert/4560

http://www.securityfocus.com/bid/31987

http://www.vupen.com/english/advisories/2008/2956

https://exchange.xforce.ibmcloud.com/vulnerabilities/46214

https://www.exploit-db.com/exploits/6878

http://securityreason.com/securityalert/4560

http://www.securityfocus.com/bid/31987

http://www.vupen.com/english/advisories/2008/2956

https://exchange.xforce.ibmcloud.com/vulnerabilities/46214

https://www.exploit-db.com/exploits/6878

KEV Catalog EPSS Scores Vendors All CVEs