CVE-2008-1933

CVE-2008-1933 describes an absolute path traversal vulnerability in a specific ActiveX control within Microsoft Zune software. This flaw allows user-assisted remote attackers to overwrite arbitrary files on a victim's system through the SaveToFile method, requiring explicit user permission for the code to execute. With a CVSS score of 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N), it indicates a network-based attack with medium complexity, resulting in partial integrity impact. While not listed in CISA's KEV catalog or the Hot List, exploit code is publicly available via ExploitDB (EDB-5489), though there is no evidence of active exploitation, Metasploit modules, or significant community discussion.