CVE-2008-4749

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2008-10-27 · updated 2026-06-16

Description

Multiple insecure method vulnerabilities in the VImpX.VImpAX ActiveX control (VImpX.ocx) 4.8.8.0 in DB Software Laboratory VImp X, possibly 4.7.7, allow remote attackers to overwrite arbitrary files via (1) the LogFile property and ClearLogFile method, and (2) the SaveToFile method.

Affected products

Db Soft Lab Vimp X: 4.8.8.0

References

http://securityreason.com/securityalert/4509
http://www.securityfocus.com/bid/31907
https://exchange.xforce.ibmcloud.com/vulnerabilities/46096
https://www.exploit-db.com/exploits/6828
http://securityreason.com/securityalert/4509
http://www.securityfocus.com/bid/31907
https://exchange.xforce.ibmcloud.com/vulnerabilities/46096
https://www.exploit-db.com/exploits/6828

Get alerted when CVE-2008-4749 or the next vulnerability affects your stack