← All CVEs

CVE-2008-6063

medium · 4.3

Microsoft Word 2007, when the "Save as PDF" add-on is enabled, places an absolute pathname in the Subject field during an "Email as PDF" operation, which allows remote attackers to obtain sensitive information such as the sender's account name and a Temporary Internet Files subdirectory name.

4.3
CVSS
10.3%
EPSS (exploit prob.)
95th
EPSS percentile
2009-02-05
Published

AV:N/AC:M/Au:N/C:P/I:N/A:N

Weaknesses

CWE-200

Affected products

VendorProductAffected versions
microsoftword2007

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2008-6063