CVEvulnerability

CVE-2008-0660

9.3 HIGH Published 2008-02-08 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2008-02-08
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-119

Description

Multiple stack-based buffer overflows in Aurigma Image Uploader ActiveX control (ImageUploader4.ocx) 4.6.17.0, 4.5.70.0, and 4.5.126.0, and ImageUploader5 5.0.10.0, as used by Facebook PhotoUploader 4.5.57.0, allow remote attackers to execute arbitrary code via long (1) ExtractExif and (2) ExtractIptc properties.

Affected configurations

• aurigma image uploader activex control 4.5.70.0 • aurigma image uploader activex control 4.5.126.0 • aurigma image uploader activex control 4.6.17.0 • aurigma image uploader activex control 5.0.10.0 • facebook facebook • facebook photouploader 4.5.57.0

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References