>> Microsoft Access Snapshot Viewer ActiveX Vulnerability (MS08-041)
Title : Microsoft Access Snapshot Viewer ActiveX Vulnerability (MS08-041) VUPEN ID : VUPEN/ADV-2008-2012 CVE ID : CVE-2008-2463 CWE ID : CWE-618 - CWE-623
Rated as : Critical
Remotely Exploitable : Yes Locally Exploitable : Yes Release Date : 2008-07-07
Technical Description
A vulnerability has been identified in the Snapshot Viewer for Microsoft Access, which could be exploited by remote attackers to take complete control of an affected system. This issue is caused by a design error in the "snapview.ocx" ActiveX control that does not restrict access to certain methods, which could be exploited by attackers to download files to arbitrary locations on a vulnerable system by tricking a user into visiting a specially crafted web page.
Note: This vulnerability is currently being exploited in the wild.
