Buffer overflow in Aurigma Image_uploader_activex_control
CVE-2008-1490
Buffer overflow in a certain Aurigma ActiveX control in ImageUploader4.ocx 4.1.36.0, as used with Piczo (aka Pizco) and possibly other online services, allows remote attackers to execute arbitrary code via unspecified vectors, possibly inv…
Vulnerability class: Buffer Overflow
EPSS: 0.040 (89.4th percentile) — read the EPSS interpretation.
Affected products
- Aurigma Image_uploader_activex_control — versions 4.1.36.0
- Piczo Imageuploader4 — versions 4.1.36.0
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
Frequently asked questions
- What is CVE-2008-1490?
- CVE-2008-1490 is a vulnerability in Aurigma Image_uploader_activex_control, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. Published 2008-03-25.
- Is CVE-2008-1490 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.