← Database

CVE-2008-1933

MEDIUM CVSS: 4.3 Published: 2008-04-25 Modified: 2026-06-16

Description

Absolute path traversal vulnerability in a certain ActiveX control in Zune allows user-assisted remote attackers to overwrite arbitrary files via the SaveToFile method. NOTE: the victim must explicitly allow the code to run.

Affected Platforms

Microsoft Zune Software

Weakness Type

CWE-22

References