CVE-2008-4471

no score yetEPSS 6.7%

Directory traversal vulnerability in the CExpressViewerControl class in the DWF Viewer ActiveX control (AdView.dll 9.0.0.96), as used in Revit Architecture 2009 SP2 and Autodesk Design Review 2009, allows remote attackers to overwrite arbitrary files via "..\" sequences in the argument to the SaveAS method.

EPSS: 6.7% chance of exploitation in the next 30 days; higher than 93% of CVEs (scores of 2026-10-31)
CWE: CWE-22
Published: 2008-10-07
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

autodesk:design_review
autodesk:dwf_viewer
autodesk:revit_architecture

References

http://retrogod.altervista.org/9sg_autodesk_revit_arch_2009_exploit.html
http://secunia.com/advisories/31989
http://securityreason.com/securityalert/4361
http://www.securityfocus.com/archive/1/496847/100/0/threaded
http://www.securityfocus.com/bid/31487

Check your stack JSON