CVE-2008-0659

CRITICO 10.0CVE-2008-0659 · Published 08/02/2008 · updated 16/06/2026

Package	Affected versions	Patched versions
image uploader activex control aurigma	`≤ 4.5.70`	No fix yet
myspaceuploader myspace	`= 1.0.0.4`	No fix yet

Description

Stack-based buffer overflow in Aurigma Image Uploader ActiveX control (ImageUploader4.ocx) 4.5.70 and earlier, as used in MySpace MySpaceUploader.ocx 1.0.0.4, allows remote attackers to execute arbitrary code via a long Action property.

References

blogs.aurigma.com/post/2008/01/Another-security-problem---oh%2c-not-again.aspx
seclists.org/fulldisclosure/2008/Jan/0593.html
secunia.com/advisories/28715
secunia.com/advisories/28733
computerworld.com/action/article.do
kb.cert.org/vuls/id/776931 · US Government Resource
securityfocus.com/bid/27533 · Exploit
vupen.com/english/advisories/2008/0344/references
vupen.com/english/advisories/2008/0345/references
exchange.xforce.ibmcloud.com/vulnerabilities/40118
exploit-db.com/exploits/5025

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free