PT-2008-3054 · Aurigma · Imageuploader4.Ocx

Published 2008-03-25 · Updated 2017-08-08 · CVE-2008-1490

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions ImageUploader4.ocx version 4.1.36.0

Description A buffer overflow issue exists in a certain Aurigma ActiveX control, potentially allowing remote attackers to execute arbitrary code. The issue may involve a long Action property.

Recommendations For ImageUploader4.ocx version 4.1.36.0, consider disabling the use of the Action property or restricting its length to prevent potential exploitation until a fix is available.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2008-1490

Affected Products

Imageuploader4.Ocx

References · 5

• http://secunia.com/advisories/29445 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-1490 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/40152 · Note
• http://marc.info/?l=bugtraq&m=120605071403813&w=2 · Note
• http://securityfocus.com/bid/28354 · Note