CVE-2008-20001 json
activePDF WebGrabber ActiveX Control Buffer Overflow
published 2025-08-30 14 mo ago modified 2026-06-16 4 mo ago also EUVD-2008-7273
- cvss
- 7.5
- version 4.0, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 1.6%
- EPSS 1.6% chance of exploitation in 30 days, percentile 75%
- public exploits
- 1
- Metasploit
Summary
activePDF WebGrabber version 3.8.2.0 contains a stack-based buffer overflow vulnerability in the GetStatus() method of the APWebGrb.ocx ActiveX control. By passing an overly long string to this method, a remote attacker can execute arbitrary code in the context of the vulnerable process. Although the control is not marked safe for scripting, exploitation is possible via crafted HTML content in Internet Explorer under permissive security settings.
Timeline
- First public exploit (Metasploit exploit/windows/fileformat/activepdf_webgrabber)
- Published
CISA SSVC
- Exploitation
- Proof of concept is public
- Automatable
- no
- Technical impact
- total
- Assessed
- 14 mo ago
Exploit prediction
1.58% chance of exploitation in the next 30 days, higher than 75% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- Metasploit exploit/windows/fileformat/activepdf_webgrabber activePDF WebGrabber ActiveX Control Buffer Overflow metasploit exploit, low rank, 2008-08-26
- raw.githubusercontent.com https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/fileformat/activepdf_webgrabber.rb referenced PoC, tagged "exploit" by a source, unverified
- exploit-db.com https://www.exploit-db.com/exploits/16635 referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 4.0 | 7.5 | CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
| CNA | 4.0 | 7.5 | CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
Affected products
- activePDF WebGrabber
Classification
- Weakness
-
- CWE-121 Stack-based Buffer Overflow
References
-
raw.githubusercontent.com
/rapid7/metasploit-framework/master/modules/exploits/windows/fileformat/activepdf_webgrabber.rb
exploit
-
exploit-db.com
/exploits/16635
exploit
-
web.archive.org
/web/20081219180353/http://www.activepdf.com/products/serverproducts/webgrabber/
product
-
support.activepdf.com
/support/solutions/35000139131
product
-
documentation.activepdf.com
/WebGrabber_GS/b_installation/New_Installation.html
product
-
vulncheck.com
/advisories/activepdf-webgrabber-activex-control-buffer-overflow
third-party-advisory
Sources
- CVE List CVE-2008-20001
- NVD CVE-2008-20001
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.