CVE-2008-2475

严重 9.3CVE-2008-2475 · Published 09/06/2009 · updated 16/06/2026

要点

CVE-2008-2475 是影响 enhanced picture uploader activex control (ebay) 的严重 (CVSS 9.3)漏洞。
未来 30 天内被利用的概率（EPSS）：4.1%，高于 90.7% 的漏洞。
暂无已修复版本：请关注参考资料中的厂商公告。

Package	Affected versions	Patched versions
enhanced picture uploader activex control ebay	`≤ 1.0.26`	No fix yet

Description

eBay Enhanced Picture Uploader ActiveX control (EPUWALcontrol.dll) before 1.0.27 allows remote attackers to execute arbitrary commands via the PictureUrls property.

References

osvdb.org/54968
pages.ebay.com/securitycenter/activex/index.html · Vendor Advisory
secunia.com/advisories/35412
kb.cert.org/vuls/id/983731 · Patch
securityfocus.com/bid/35248

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free