Unscored severity · published Feb 8, 2008
CVE-2008-0660
Multiple stack-based buffer overflows in Aurigma Image Uploader ActiveX control (ImageUploader4.ocx) 4.6.17.0, 4.5.70.0, and 4.5.126.0, and ImageUploader5 5.0.10.0, as used by…
–
CVSS
37.8%
EPSS
No
On KEV
Description
Multiple stack-based buffer overflows in Aurigma Image Uploader ActiveX control (ImageUploader4.ocx) 4.6.17.0, 4.5.70.0, and 4.5.126.0, and ImageUploader5 5.0.10.0, as used by Facebook PhotoUploader 4.5.57.0, allow remote attackers to execute arbitrary code via long (1) ExtractExif and (2) ExtractIptc properties.
Exploitation
Is it being used?
Exploit prediction (EPSS)37.8% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FA
Facebook · Facebook
All versions, or not specified · source: NVD
IU
Image Uploader Activex Control · Aurigma
4.5.70.0; 4.5.126.0; 4.6.17.0; 5.0.10.0 · source: NVD
PH
Photouploader · Facebook
4.5.57.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-0660
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-0660
seclists.org
http://seclists.org/fulldisclosure/2008/Feb/0023.html
Vendor Advisory
http://secunia.com/advisories/28707
Vendor Advisory
http://secunia.com/advisories/28713
www.computerworld.com
http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9060483
US Government Resource
http://www.kb.cert.org/vuls/id/776931
www.securityfocus.com
http://www.securityfocus.com/bid/27576
More from Image Uploader Activex Control
–
CVE-2008-1490
Buffer overflow in a certain Aurigma ActiveX control in ImageUploader4.ocx 4.1.36.0, as used with Piczo (aka Pizco) and possibly other online services, allows remote attackers to…
–
CVE-2008-0659
Stack-based buffer overflow in Aurigma Image Uploader ActiveX control (ImageUploader4.ocx) 4.5.70 and earlier, as used in MySpace MySpaceUploader.ocx 1.0.0.4, allows remote…