CVE-2008-0660: Buffer Overflow
First published: Fri Feb 08 2008(Updated: )
Multiple stack-based buffer overflows in Aurigma Image Uploader ActiveX control (ImageUploader4.ocx) 4.6.17.0, 4.5.70.0, and 4.5.126.0, and ImageUploader5 5.0.10.0, as used by Facebook PhotoUploader 4.5.57.0, allow remote attackers to execute arbitrary code via long (1) ExtractExif and (2) ExtractIptc properties.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Aurigma Image Uploader ActiveX control | =4.5.70.0 | |
| Facebook Facebook | ||
| Aurigma Image Uploader ActiveX control | =4.5.126.0 | |
| Aurigma Image Uploader ActiveX control | =5.0.10.0 | |
| Aurigma Image Uploader ActiveX control | =4.6.17.0 | |
| Facebook PhotoUploader | =4.5.57.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://seclists.org/fulldisclosure/2008/Feb/0023.html
- http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9060483
- http://www.kb.cert.org/vuls/id/776931
- http://www.securitytracker.com/id?1019297
- http://secunia.com/advisories/28707
- http://secunia.com/advisories/28713
- http://www.securityfocus.com/bid/27577
- http://www.securityfocus.com/bid/27576
- http://www.vupen.com/english/advisories/2008/0394/references
- http://www.vupen.com/english/advisories/2008/0391/references
- https://www.exploit-db.com/exploits/5049
- collector/nvd-historical
- collector/nvd-index
- agent/severity
- agent/weakness
- agent/references
- agent/author
- agent/type
- agent/event
- agent/description
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/aurigma
- canonical/aurigma image uploader activex control
- version/aurigma image uploader activex control/4.5.70.0
- vendor/facebook
- canonical/facebook facebook
- version/aurigma image uploader activex control/4.5.126.0
- version/aurigma image uploader activex control/5.0.10.0
- version/aurigma image uploader activex control/4.6.17.0
- canonical/facebook photouploader
- version/facebook photouploader/4.5.57.0