CVE-2008-0237: Microsoft Rich Textbox Control

Medium severity, CVSS 6.8. EPSS: 20.5% chance of exploitation in the next 30 days.

The Microsoft Rich Textbox ActiveX Control (RICHTX32.OCX) 6.1.97.82 allows remote attackers to execute arbitrary commands by invoking the insecure SaveFile method.

Affected products

• Microsoft Rich Textbox Control: version 6.0 only

Published 2008-01-11. Last modified 2026-06-16.