PT-2008-5213 · Unknown · Ultra Office Control

Shinnai · Published 2008-09-02 · Updated 2024-02-14 · CVE-2008-3878

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Ultra Office Control version 2.0.2008.801

Description The issue is a stack-based buffer overflow in the Ultra.OfficeControl ActiveX control. This occurs when the strUrl, strFile, and strPostData parameters to the HttpUpload() method are overly long, allowing remote attackers to execute arbitrary code.

Recommendations For Ultra Office Control version 2.0.2008.801, consider disabling the HttpUpload() method until a patch is available to prevent exploitation. Restrict access to the Ultra.OfficeControl ActiveX control to minimize the risk of arbitrary code execution. Avoid using the strUrl, strFile, and strPostData parameters in the HttpUpload() method until the issue is resolved.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2008-3878

Affected Products

Ultra Office Control

References · 10

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/ultraoffice_httpupload.rb · Exploit
• 🔥 https://exploit-db.com/exploits/6318 · Exploit
• 🔥 https://exploit-db.com/exploits/16513 · Exploit
• 🔥 http://shinnai.net/xplits/TXT_RvfuIrwypWLMaiVn33Iy.html · Exploit
• http://secunia.com/advisories/31632 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-3878 · Security Note
• http://securityreason.com/securityalert/4200 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44749 · Note
• http://shinnai.net/index.php?mod=02_Forum&group=Security&argument=Remote_performed_exploits&topic=1219826651.ff.php · Note
• http://securityfocus.com/bid/30861 · Note