CVE-2008-5711
Facebook PhotoUploader <5.0.14.0 - Buffer Overflow
Title source: llmDescription
Heap-based buffer overflow in the Facebook PhotoUploader ActiveX control 5.0.14.0 and earlier allows remote attackers to execute arbitrary code via a long FileMask property value.
Exploits (4)
exploitdb
WORKING POC
VERIFIED
by Metasploit · rubyremotewindows
https://www.exploit-db.com/exploits/16505
exploitdb
WORKING POC
VERIFIED
by MC Group Ltd. · htmlremotewindows
https://www.exploit-db.com/exploits/5102
exploitdb
WORKING POC
VERIFIED
by Elazar · htmlremotewindows
https://www.exploit-db.com/exploits/5049
metasploit
WORKING POC
NORMAL
by MC · rubypocwin
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/facebook_extractiptc.rb
Scores
EPSS
0.5568
EPSS Percentile
98.1%
Details
CWE
CWE-119
Status
published
Products (2)
facebook/photouploader
4.5.57.0
facebook/photouploader
< 5.0.14.0
Published
Dec 24, 2008
Tracked Since
Feb 18, 2026