CVE-2008-1933

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 13.9% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2008-04-25 · updated 2026-06-16
Weakness: CWE-22

Description

Absolute path traversal vulnerability in a certain ActiveX control in Zune allows user-assisted remote attackers to overwrite arbitrary files via the SaveToFile method. NOTE: the victim must explicitly allow the code to run.

Affected products

Microsoft Zune Software: all versions

References

http://www.securityfocus.com/archive/1/491231/100/0/threaded
https://exchange.xforce.ibmcloud.com/vulnerabilities/42028
https://www.exploit-db.com/exploits/5489
http://www.securityfocus.com/archive/1/491231/100/0/threaded
https://exchange.xforce.ibmcloud.com/vulnerabilities/42028
https://www.exploit-db.com/exploits/5489

Get alerted when CVE-2008-1933 or the next vulnerability affects your stack