CVE-2008-3878 Stack-based buffer overflow in the Ultra.OfficeControl ActiveX control in OfficeCtrl.ocx 2.0.2008.801 in Ultra Shareware Ultra Office Control allows remote attackers to execute arbitrary code via long...
HighCVSS 9.3
EPSS 36.2%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Stack-based buffer overflow in the Ultra.OfficeControl ActiveX control in OfficeCtrl.ocx 2.0.2008.801 in Ultra Shareware Ultra Office Control allows remote attackers to execute arbitrary code via long strUrl, strFile, and strPostData parameters to the HttpUpload method.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ultrashareware ultra office control | = 2.0.2008.801 | No fix listed |
References
- 31632 third-party-advisory vendor-advisory
- 4200 third-party-advisory
- 30861 vdb-entry
- www.shinnai.net url-repurposed
- www.shinnai.net exploit url-repurposed
- uoc-ultraofficecontrol-bo(44749) vdb-entry
- 6318 exploit