CVE-2008-20001
activePDF WebGrabber 3.8.2.0 - Buffer Overflow
Title source: llmDescription
activePDF WebGrabber version 3.8.2.0 contains a stack-based buffer overflow vulnerability in the GetStatus() method of the APWebGrb.ocx ActiveX control. By passing an overly long string to this method, a remote attacker can execute arbitrary code in the context of the vulnerable process. Although the control is not marked safe for scripting, exploitation is possible via crafted HTML content in Internet Explorer under permissive security settings.
Exploits (2)
exploitdb
WORKING POC
VERIFIED
by Metasploit · rubyremotewindows
https://www.exploit-db.com/exploits/16635
metasploit
WORKING POC
LOW
by MC · rubypocwin
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/activepdf_webgrabber.rb
References (6)
Scores
EPSS
0.5470
EPSS Percentile
98.0%
Classification
CWE
CWE-121
Status
draft
Timeline
Published
Aug 30, 2025
Tracked Since
Feb 18, 2026