CVE-2008-1490 Buffer overflow in a certain Aurigma ActiveX control in ImageUploader4.ocx 4.1.36.0, as used with Piczo (aka Pizco) and possibly other online services, allows remote attackers to execute arbitrary cod...
HighCVSS 9.3
EPSS 4.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in a certain Aurigma ActiveX control in ImageUploader4.ocx 4.1.36.0, as used with Piczo (aka Pizco) and possibly other online services, allows remote attackers to execute arbitrary code via unspecified vectors, possibly involving a long Action property, a different CLSID than CVE-2008-0659.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| aurigma image uploader activex control | = 4.1.36.0 | No fix listed |
| piczo imageuploader4 | = 4.1.36.0 | No fix listed |
References
- 20080320 Pizco vulnerable to buffer overflow in activex mailing-list
- 29445 third-party-advisory vendor-advisory
- 28354 vdb-entry
- aurigma-imageuploader41-bo(40152) vdb-entry