CVE-2008-0660

Aurigma Image Uploader Activex Control - Memory Corruption

Title source: rule

Description

Multiple stack-based buffer overflows in Aurigma Image Uploader ActiveX control (ImageUploader4.ocx) 4.6.17.0, 4.5.70.0, and 4.5.126.0, and ImageUploader5 5.0.10.0, as used by Facebook PhotoUploader 4.5.57.0, allow remote attackers to execute arbitrary code via long (1) ExtractExif and (2) ExtractIptc properties.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Elazar · htmlremotewindows

https://www.exploit-db.com/exploits/5049

View Code ZIP pw:eip

References (11)

[Mailing List] http://seclists.org/fulldisclosure/2008/Feb/0023.html

[Third Party Advisory] http://www.vupen.com/english/advisories/2008/0394/references

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/27576

[Vendor Advisory] http://secunia.com/advisories/28707

[Third Party Advisory] http://www.vupen.com/english/advisories/2008/0391/references

[Vendor Advisory] http://secunia.com/advisories/28713

[Exploit, Third Party Advisory] https://www.exploit-db.com/exploits/5049

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/27577

[Third Party Advisory, VDB Entry] http://www.securitytracker.com/id?1019297

[US Government Resource] http://www.kb.cert.org/vuls/id/776931

[Various Sources] http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9060483

Scores

EPSS 0.5439

EPSS Percentile 98.0%

Details

CWE

CWE-119

Status published

Products (6)

aurigma/image_uploader_activex_control 4.5.70.0

aurigma/image_uploader_activex_control 4.5.126.0

aurigma/image_uploader_activex_control 4.6.17.0

aurigma/image_uploader_activex_control 5.0.10.0

facebook/facebook

facebook/photouploader 4.5.57.0

Published Feb 08, 2008

Tracked Since Feb 18, 2026