CVE-2008-4922: Djvu Activex Control For Microsoft Office 2000

High severity, CVSS 9.3. EPSS: 32.7% chance of exploitation in the next 30 days.

Buffer overflow in the DjVu ActiveX Control 3.0 for Microsoft Office (DjVu_ActiveX_MSOffice.dll) allows remote attackers to execute arbitrary code via a long (1) ImageURL property, and possibly the (2) Mode, (3) Page, or (4) Zoom properties.

Affected products

• Djvu Activex Control For Microsoft Office 2000: any version

Published 2008-11-04. Last modified 2026-06-16.