Vulnerability in N/a

CVE-2008-0659

Stack-based buffer overflow in Aurigma Image Uploader ActiveX control (ImageUploader4.ocx) 4.5.70 and earlier, as used in MySpace MySpaceUploader.ocx 1.0.0.4, allows remote attackers to execute arbitrary code via a long Action property.

EPSS: 0.563 (98.9th percentile) — read the EPSS interpretation.

Affected products

N/a — versions n/a

References

28733 (x_refsource_SECUNIA, third-party-advisory)
blogs.aurigma.com/post/2008/01/Another-security-problem---oh,-not-again.aspx (x_refsource_CONFIRM)
28715 (x_refsource_SECUNIA, third-party-advisory)
27533 (vdb-entry, x_refsource_BID)
20080131 MySpace Uploader ActiveX Control Buffer Overflow (mailing-list, x_refsource_FULLDISC)
myspace-myspaceuploader-bo(40118) (vdb-entry, x_refsource_XF)
ADV-2008-0345 (vdb-entry, x_refsource_VUPEN)
ADV-2008-0344 (vdb-entry, x_refsource_VUPEN)
VU#776931 (x_refsource_CERT-VN, third-party-advisory)
5025 (exploit, x_refsource_EXPLOIT-DB)