AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2008-1898

HIGH · CVSS 9.3 EPSS 52.03% Public Exploit

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2008-04-21 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

External Security References
exploit-db.com ↗ exploit-db.com ↗

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2008-1898
Severity
HIGH
CVSS
9.3
EPSS
52.03%
Microsoft Office

Original NVD Description

A certain ActiveX control in WkImgSrv.dll 7.03.0616.0, as distributed in Microsoft Works 7 and Microsoft Office 2003 and 2007, allows remote attackers to execute arbitrary code or cause a denial of service (browser crash) via an invalid WksPictureInterface property value, which triggers an improper function call.