CVEvulnerability
CVE-2008-3878
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-09-02
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Stack-based buffer overflow in the Ultra.OfficeControl ActiveX control in OfficeCtrl.ocx 2.0.2008.801 in Ultra Shareware Ultra Office Control allows remote attackers to execute arbitrary code via long strUrl, strFile, and strPostData parameters to the HttpUpload method.
Affected configurations
• ultrashareware ultra office control 2.0.2008.801
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://secunia.com/advisories/31632 Vendor Advisory
- http://securityreason.com/securityalert/4200 securityreason.com
- http://www.securityfocus.com/bid/30861 www.securityfocus.com
- http://www.shinnai.net/index.php?mod=02_Forum&group=Security&argument=Remote_performed_exploits&topic=1219826651.ff.php URL Repurposed
- http://www.shinnai.net/xplits/TXT_RvfuIrwypWLMaiVn33Iy.html Exploit, URL Repurposed
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44749 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/6318 www.exploit-db.com
- http://secunia.com/advisories/31632 Vendor Advisory
- http://securityreason.com/securityalert/4200 securityreason.com
- http://www.securityfocus.com/bid/30861 www.securityfocus.com
- http://www.shinnai.net/index.php?mod=02_Forum&group=Security&argument=Remote_performed_exploits&topic=1219826651.ff.php URL Repurposed
- http://www.shinnai.net/xplits/TXT_RvfuIrwypWLMaiVn33Iy.html Exploit, URL Repurposed
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44749 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/6318 www.exploit-db.com