CVE-2008-4922: Buffer Overflow

Published Nov 4, 2008

Updated

Buffer overflow in the DjVu ActiveX Control 3.0 for Microsoft Office (DjVuActiveXMSOffice.dll) allows remote attackers to execute arbitrary code via a long (1) ImageURL property, and possibly the (2) Mode, (3) Page, or (4) Zoom properties.

Affected Software

2 affected components

DjVu Activex Control For Microsoft Office 2000

Microsoft Office=2000

Event History

Nov 4, 2008

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

Description

Data Sourced

09:00 PM

DescriptionWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2008-4922?

CVE-2008-4922 has been classified as a critical vulnerability due to its potential to allow remote code execution.

How do I fix CVE-2008-4922?

To fix CVE-2008-4922, ensure that your DjVu ActiveX Control software is updated to the latest version.

What systems are affected by CVE-2008-4922?

CVE-2008-4922 affects systems using DjVu ActiveX Control 3.0 for Microsoft Office, particularly the 2000 version.

What types of attacks can be executed via CVE-2008-4922?

CVE-2008-4922 allows attackers to execute arbitrary code on affected systems by exploiting a buffer overflow.

Is it safe to use Microsoft Office 2000 with CVE-2008-4922 present?

Using Microsoft Office 2000 with the vulnerable DjVu ActiveX Control presents a significant security risk.