Autodesk Dwf Viewer vulnerabilities

2 CVEs affecting Autodesk Dwf Viewer, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2008-4472, published 2008-10-07.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2008-4472, published 2008-10-07. High severity, CVSS 9.3. EPSS: 7.8% chance of exploitation in the next 30 days. The UpdateEngine class in the LiveUpdate ActiveX control (LiveUpdate16.DLL 17.2.56), as used in Revit Architecture 2009 SP2 and Autodesk Design Review 2009, allows remote attackers to execute…
CVE-2008-4471, published 2008-10-07. High severity, CVSS 9.3. EPSS: 6.7% chance of exploitation in the next 30 days. Directory traversal vulnerability in the CExpressViewerControl class in the DWF Viewer ActiveX control (AdView.dll 9.0.0.96), as used in Revit Architecture 2009 SP2 and Autodesk Design Review 2009,…