$ cve CVE-2008-1898 JSON

CVE-2008-1898 EXPLOIT

9.3

HIGH · CVSS 2.0 · EPSS 52% (pctl 99)

Patch early

A public exploit exists.

Description

A certain ActiveX control in WkImgSrv.dll 7.03.0616.0, as distributed in Microsoft Works 7 and Microsoft Office 2003 and 2007, allows remote attackers to execute arbitrary code or cause a denial of service (browser crash) via an invalid WksPictureInterface property value, which triggers an improper function call.

Scoring

CVSS	9.3 (HIGH, v2.0)
Vector	AV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS	52.03% — more likely to be exploited than 99% of all CVEs
Weakness	CWE-20
On CISA KEV	no
Public exploit	yes
Published	2008-04-21
Last modified	2026-06-16

Affected (2)

Vendor	Product
microsoft	office
microsoft	works

Public exploits

Source	Title	Date
exploit-db	Microsoft Works 7 - 'WkImgSrv.dll' WKsPictureInterface() ActiveX (Metasploit)	2010-09-25
exploit-db	Microsoft Works 7 - 'WkImgSrv.dll' ActiveX Remote Buffer Overflow	2008-05-02
exploit-db	Microsoft Works 7 - 'WkImgSrv.dll' ActiveX Denial of Service (PoC)	2008-04-17

References

→ the Explorer · watch your stack · NVD