CVE-2008-1898

A certain ActiveX control in WkImgSrv.dll 7.03.0616.0, as distributed in Microsoft Works 7 and Microsoft Office 2003 and 2007, allows remote attackers to…

published April 21, 2008

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.0th percentile for exploit probability.

CVSS
—
EPSS
52%
Percentile
99.0
In the wild
Unconfirmed
What it is

⚠️ A single mishandled property value in an ActiveX control could lead to chaos! This vulnerability in WkImgSrv.dll lets attackers run wild, executing arbitrary code or crashing your browser. 🔥 Think of this as a waiter taking a completely wrong order because they misread your request—suddenly, you’re served a dish you didn’t want, and the restaurant’s kitchen is in chaos! If exploited, an attacker could execute any code they desire on your system, leading to unauthorized access, data loss, or even a full system takeover. Alternatively, it could simply cause your browser to crash, leaving you scrambling to regain control!

Put simply

Think of this as a waiter taking a completely wrong order because they misread your request—suddenly, you’re served a dish you didn’t want, and the restaurant’s kitchen is in chaos! This vulnerability arises from an improper function call triggered by an invalid WksPictureInterface property in the WkImgSrv.dll ActiveX control found in Microsoft Works and older versions of Microsoft Office.

What to do

If exploited, an attacker could execute any code they desire on your system, leading to unauthorized access, data loss, or even a full system takeover. Alternatively, it could simply cause your browser to crash, leaving you scrambling to regain control! To mitigate this risk, users should consider disabling ActiveX controls in their browsers and ensure they're running the latest versions of Microsoft Works and Office. Regular updates and security patches can also help in addressing vulnerabilities like this one. You've got this! Stay proactive and secure your system—let’s keep those cyber villains at bay! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.52033 · 99.0th percentile
Published
2008-04-21T17:00Z
EPSS history
Timeline
  • 21 APR 17:00Z
    A certain ActiveX control in WkImgSrv.dll 7.03.0616.0, as distributed in Microsoft Works 7 and Microsoft Office 2003 and 2007, allows remote attackers to…
    cvelistv5