CVE-2008-20001
Gravedad CVSS v4.0:
ALTA
Tipo:
CWE-121
Desbordamiendo de búfer basado en pila (Stack)
Fecha de publicación:
30/08/2025
Última modificación:
16/09/2025
Descripción
*** Pendiente de traducción *** activePDF WebGrabber version 3.8.2.0 contains a stack-based buffer overflow vulnerability in the GetStatus() method of the APWebGrb.ocx ActiveX control. By passing an overly long string to this method, a remote attacker can execute arbitrary code in the context of the vulnerable process. Although the control is not marked safe for scripting, exploitation is possible via crafted HTML content in Internet Explorer under permissive security settings.
Impacto
Puntuación base 4.0
7.50
Gravedad 4.0
ALTA
Referencias a soluciones, herramientas e información
- https://documentation.activepdf.com/WebGrabber_GS/b_installation/New_Installation.html
- https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/fileformat/activepdf_webgrabber.rb
- https://support.activepdf.com/support/solutions/35000139131
- https://web.archive.org/web/20081219180353/http://www.activepdf.com/products/serverproducts/webgrabber/
- https://www.exploit-db.com/exploits/16635
- https://www.vulncheck.com/advisories/activepdf-webgrabber-activex-control-buffer-overflow