VULNERABILITY INTELLIGENCE
CVE-2008-6063
CVSS score4.3 MEDIUM
EPSS probability10.27%
CISA KEVNot currently listed
Published2009-02-05
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:N/A:N
Description
Microsoft Word 2007, when the "Save as PDF" add-on is enabled, places an absolute pathname in the Subject field during an "Email as PDF" operation, which allows remote attackers to obtain sensitive information such as the sender's account name and a Temporary Internet Files subdirectory name.
Weakness classification
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor