Back
CVE-2008-2463
The Microsoft Office Snapshot Viewer ActiveX control in snapview.ocx 10.0.5529.0, as distributed in the standalone Snapshot Viewer and…
Medium6.8EPSS 59.0%
- Published
- Updated
- Reserved
- Assigned by
- certcc
Description
The Microsoft Office Snapshot Viewer ActiveX control in snapview.ocx 10.0.5529.0, as distributed in the standalone Snapshot Viewer and Microsoft Office Access 2000 through 2003, allows remote attackers to download arbitrary files to a client machine via a crafted HTML document or e-mail message, probably involving use of the SnapshotPath and CompressedPath properties and the PrintSnapshot method. NOTE: this can be leveraged for code execution by writing to a Startup folder.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| NVDNVD · Modified | 2.0 | Medium6.8 | AV:N/AC:M/Au:N/C:P/I:P/A:P |
- EPSS (exploitation in 30 days)
- 59.0% · top 0.9% of all CVEs (3 Nov 2026)
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 6.8.
Weakness
Affected products
n/a
- affected n/a
References (12)
- TA08-189A (opens in a new tab)third-party-advisoryx_refsource_CERTx_transferred
- 6124 (opens in a new tab)exploitx_refsource_EXPLOIT-DBx_transferred
- TA08-225A (opens in a new tab)third-party-advisoryx_refsource_CERTx_transferred
- ADV-2008-2012 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
- HPSBST02360 (opens in a new tab)vendor-advisoryx_refsource_HPx_transferred
- http://www.microsoft.com/technet/security/advisory/955179.mspx (opens in a new tab)x_refsource_CONFIRMx_transferred
- VU#837785 (opens in a new tab)third-party-advisoryx_refsource_CERT-VNx_transferred
- 30883 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
- oval:org.mitre.oval:def:6120 (opens in a new tab)vdb-entrysignaturex_refsource_OVALx_transferred
- microsoft-snapshotviewer-code-execution(43613) (opens in a new tab)vdb-entryx_refsource_XFx_transferred
- 30114 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
- 1020433 (opens in a new tab)vdb-entryx_refsource_SECTRACKx_transferred
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2008-2463)Record last updated .