CVE-2008-2463
EXPLOITEDMicrosoft Office Snapshot Viewer ActiveX snapview.ocx 10.0.5529.0 - RCE via SnapshotPath/CompressedPath
Title source: llmExploitation Summary
CVE-2008-2463 has been observed exploited in the wild (reported by VulnCheck KEV).
EIP tracks 3 public exploits from researchers including Metasploit, callAX, MC, including a Metasploit module exploits/windows/browser/ms08_041_snapshotviewer.
AI-analyzed exploit summary This Metasploit module exploits CVE-2008-2463 by leveraging the Microsoft Office Snapshot Viewer ActiveX control to download and execute an arbitrary payload on the target system. The exploit uses a malicious HTML page to trigger the vulnerability and deliver a payload via HTTP.
Description
The Microsoft Office Snapshot Viewer ActiveX control in snapview.ocx 10.0.5529.0, as distributed in the standalone Snapshot Viewer and Microsoft Office Access 2000 through 2003, allows remote attackers to download arbitrary files to a client machine via a crafted HTML document or e-mail message, probably involving use of the SnapshotPath and CompressedPath properties and the PrintSnapshot method. NOTE: this can be leveraged for code execution by writing to a Startup folder.
Exploits (3)
This Metasploit module exploits CVE-2008-2463 by leveraging the Microsoft Office Snapshot Viewer ActiveX control to download and execute an arbitrary payload on the target system. The exploit uses a malicious HTML page to trigger the vulnerability and deliver a payload via HTTP.
This exploit leverages a vulnerability in the Microsoft Access Snapshot Viewer ActiveX control to download and execute an arbitrary file. It generates an HTML file that triggers the vulnerability when opened in a vulnerable system.
This Metasploit module exploits CVE-2008-2463 by leveraging the Microsoft Office Snapshot Viewer ActiveX control to place arbitrary files on a user's system. It delivers a payload via an HTTP server and triggers the vulnerability through a crafted HTML page.