CVE-2008-4493

Microsoft PicturePusher ActiveX control (PipPPush.DLL 7.00.0709), as used in Microsoft Digital Image 2006 Starter Edition, allows remote attackers to force the…

published October 8, 2008

CVSS

—

EPSS

18%

Percentile

97.1

In the wild

Unconfirmed

What it is

Microsoft PicturePusher ActiveX control (PipPPush.DLL 7.00.0709), as used in Microsoft Digital Image 2006 Starter Edition, allows remote attackers to force the upload of arbitrary files by using the AddString and Post methods and a modified PostURL to construct an HTTP POST request. NOTE: this issue might only be exploitable in limited environments or non-default browser settings.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.17589 · 97.1th percentile
Published: 2008-10-08T20:44Z

EPSS history

Timeline

08 OCT 20:44Z
Microsoft PicturePusher ActiveX control (PipPPush.DLL 7.00.0709), as used in Microsoft Digital Image 2006 Starter Edition, allows remote attackers to force the…
cvelistv5