CVE-2008-0659

2008-02-0802:00:00

CWE-119

mitre

web.nvd.nist.gov

cve-2008-0659

buffer overflow

activex

imageuploader

myspace

security vulnerability

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.9

Confidence

Low

EPSS

0.662

Percentile

98.0%

JSON

Stack-based buffer overflow in Aurigma Image Uploader ActiveX control (ImageUploader4.ocx) 4.5.70 and earlier, as used in MySpace MySpaceUploader.ocx 1.0.0.4, allows remote attackers to execute arbitrary code via a long Action property.

Affected configurations

Nvd

Node

aurigmaimage_uploader_activex_controlRange≤4.5.70

myspacemyspaceuploaderMatch1.0.0.4

VendorProductVersionCPE
aurigmaimage_uploader_activex_control*cpe:2.3:a:aurigma:image_uploader_activex_control:*:*:*:*:*:*:*:*
myspacemyspaceuploader1.0.0.4cpe:2.3:a:myspace:myspaceuploader:1.0.0.4:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
aurigma	image_uploader_activex_control	*	cpe:2.3:a:aurigma:image_uploader_activex_control::::::::
myspace	myspaceuploader	1.0.0.4	cpe:2.3:a:myspace:myspaceuploader:1.0.0.4:::::::*