What’s Vulnerable › Vulnerabilities

CVE-2008-3957

• Severity: critical (CVSS 9.3 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 17.8% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2008-09-09 · updated 2026-06-16
• Weakness: CWE-20

Description

The Microsoft Windows Image Acquisition Logger ActiveX control allows remote attackers to force the download of arbitrary files onto a client system via a URL in the first argument to the Open method, in conjunction with a full destination pathname in the first argument to the Save method. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected products

• Microsoft Windows Image Acquisition Logger: all versions

References

• http://www.securityfocus.com/bid/31069
• http://www.securityfocus.com/data/vulnerabilities/exploits/31069
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45015
• http://www.securityfocus.com/bid/31069
• http://www.securityfocus.com/data/vulnerabilities/exploits/31069
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45015

Get alerted when CVE-2008-3957 or the next vulnerability affects your stack