CVE-2008-20001: activePDF WebGrabber ActiveX Control Buffer Overflow
activePDF WebGrabber version 3.8.2.0 contains a stack-based buffer overflow vulnerability in the GetStatus() method of the APWebGrb.ocx ActiveX control. By passing an overly long string to this method, a remote attacker can execute arbitrary code in the context of the vulnerable process. Although the control is not marked safe for scripting, exploitation is possible via crafted HTML content in Internet Explorer under permissive security settings.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-20001?
The severity of CVE-2008-20001 is considered high due to the potential for remote code execution.
How do I fix CVE-2008-20001?
Fixing CVE-2008-20001 involves updating to a patched version of activePDF WebGrabber that addresses the stack-based buffer overflow vulnerability.
What impact does CVE-2008-20001 have on activePDF WebGrabber users?
CVE-2008-20001 can allow remote attackers to execute arbitrary code, which poses a significant risk to users' systems.
Can CVE-2008-20001 be exploited remotely?
Yes, CVE-2008-20001 can be exploited remotely by sending an overly long string to the vulnerable GetStatus() method.
What versions of activePDF WebGrabber are affected by CVE-2008-20001?
CVE-2008-20001 affects activePDF WebGrabber version 3.8.2.0 specifically.