{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2008-02-03T00:00:00", "descriptions": [{"lang": "en", "value": "Multiple stack-based buffer overflows in Aurigma Image Uploader ActiveX control (ImageUploader4.ocx) 4.6.17.0, 4.5.70.0, and 4.5.126.0, and ImageUploader5 5.0.10.0, as used by Facebook PhotoUploader 4.5.57.0, allow remote attackers to execute arbitrary code via long (1) ExtractExif and (2) ExtractIptc properties."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-09-28T12:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "20080203 FaceBook/Aurigma Image/PhotoUploader Buffer Overflow", "tags": ["mailing-list", "x_refsource_FULLDISC"], "url": "http://seclists.org/fulldisclosure/2008/Feb/0023.html"}, {"name": "ADV-2008-0394", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2008/0394/references"}, {"name": "27576", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/27576"}, {"name": "28707", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/28707"}, {"name": "ADV-2008-0391", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2008/0391/references"}, {"name": "28713", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/28713"}, {"name": "5049", "tags": ["exploit", "x_refsource_EXPLOIT-DB"], "url": "https://www.exploit-db.com/exploits/5049"}, {"name": "27577", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/27577"}, {"name": "1019297", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://www.securitytracker.com/id?1019297"}, {"name": "VU#776931", "tags": ["third-party-advisory", "x_refsource_CERT-VN"], "url": "http://www.kb.cert.org/vuls/id/776931"}, {"tags": ["x_refsource_MISC"], "url": "http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9060483"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2008-0660", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Multiple stack-based buffer overflows in Aurigma Image Uploader ActiveX control (ImageUploader4.ocx) 4.6.17.0, 4.5.70.0, and 4.5.126.0, and ImageUploader5 5.0.10.0, as used by Facebook PhotoUploader 4.5.57.0, allow remote attackers to execute arbitrary code via long (1) ExtractExif and (2) ExtractIptc properties."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "20080203 FaceBook/Aurigma Image/PhotoUploader Buffer Overflow", "refsource": "FULLDISC", "url": "http://seclists.org/fulldisclosure/2008/Feb/0023.html"}, {"name": "ADV-2008-0394", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2008/0394/references"}, {"name": "27576", "refsource": "BID", "url": "http://www.securityfocus.com/bid/27576"}, {"name": "28707", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/28707"}, {"name": "ADV-2008-0391", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2008/0391/references"}, {"name": "28713", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/28713"}, {"name": "5049", "refsource": "EXPLOIT-DB", "url": "https://www.exploit-db.com/exploits/5049"}, {"name": "27577", "refsource": "BID", "url": "http://www.securityfocus.com/bid/27577"}, {"name": "1019297", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id?1019297"}, {"name": "VU#776931", "refsource": "CERT-VN", "url": "http://www.kb.cert.org/vuls/id/776931"}, {"name": "http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9060483", "refsource": "MISC", "url": "http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9060483"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T07:54:22.958Z"}, "title": "CVE Program Container", "references": [{"name": "20080203 FaceBook/Aurigma Image/PhotoUploader Buffer Overflow", "tags": ["mailing-list", "x_refsource_FULLDISC", "x_transferred"], "url": "http://seclists.org/fulldisclosure/2008/Feb/0023.html"}, {"name": "ADV-2008-0394", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2008/0394/references"}, {"name": "27576", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/27576"}, {"name": "28707", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/28707"}, {"name": "ADV-2008-0391", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2008/0391/references"}, {"name": "28713", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/28713"}, {"name": "5049", "tags": ["exploit", "x_refsource_EXPLOIT-DB", "x_transferred"], "url": "https://www.exploit-db.com/exploits/5049"}, {"name": "27577", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/27577"}, {"name": "1019297", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://www.securitytracker.com/id?1019297"}, {"name": "VU#776931", "tags": ["third-party-advisory", "x_refsource_CERT-VN", "x_transferred"], "url": "http://www.kb.cert.org/vuls/id/776931"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9060483"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2008-0660", "datePublished": "2008-02-08T01:00:00", "dateReserved": "2008-02-07T00:00:00", "dateUpdated": "2024-08-07T07:54:22.958Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:aurigma:image_uploader_activex_control:4.5.70.0:*:*:*:*:*:*:*", "matchCriteriaId": "0556F443-8B5D-46E4-A6D1-B3C2233F12B7", "vulnerable": true}, {"criteria": "cpe:2.3:a:aurigma:image_uploader_activex_control:4.5.126.0:*:*:*:*:*:*:*", "matchCriteriaId": "862FFE86-B759-420B-A3A4-BBBAE22229A6", "vulnerable": true}, {"criteria": "cpe:2.3:a:aurigma:image_uploader_activex_control:4.6.17.0:*:*:*:*:*:*:*", "matchCriteriaId": "20F7FBFB-24AA-4CCB-8CEC-E1BC8682574B", "vulnerable": true}, {"criteria": "cpe:2.3:a:aurigma:image_uploader_activex_control:5.0.10.0:*:*:*:*:*:*:*", "matchCriteriaId": "F15B9A9B-3218-4E5F-ABFA-0D6BF1DBD926", "vulnerable": true}, {"criteria": "cpe:2.3:a:facebook:facebook:*:*:*:*:*:*:*:*", "matchCriteriaId": "0D21D43B-793C-4D67-A6EE-EEE7471920D6", "vulnerable": true}, {"criteria": "cpe:2.3:a:facebook:photouploader:4.5.57.0:*:*:*:*:*:*:*", "matchCriteriaId": "6FA99512-97A0-453D-A142-5C743DD9D8D0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Multiple stack-based buffer overflows in Aurigma Image Uploader ActiveX control (ImageUploader4.ocx) 4.6.17.0, 4.5.70.0, and 4.5.126.0, and ImageUploader5 5.0.10.0, as used by Facebook PhotoUploader 4.5.57.0, allow remote attackers to execute arbitrary code via long (1) ExtractExif and (2) ExtractIptc properties."}, {"lang": "es", "value": "M\u00faltiples desbordamientos de b\u00fafer basados en pila en el control ActiveX de Aurigma Image Uploader (ImageUploader4.ocx) versiones 4.6.17.0, 4.5.70.0 y 4.5.126.0 y en ImageUploader5 5.0.10.0, tal y como se usa en Facebook PhotoUploader 4.5.57.0, permiten a atacantes remotos ejecutar c\u00f3digo de su elecci\u00f3n mediante valores largos en las propiedades (1) ExtractExif y (2) ExtractIptc."}], "id": "CVE-2008-0660", "lastModified": "2017-09-29T01:30:24.223", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 9.3, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 10.0, "obtainAllPrivilege": true, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}]}, "published": "2008-02-08T02:00:00.000", "references": [{"source": "cve@mitre.org", "url": "http://seclists.org/fulldisclosure/2008/Feb/0023.html"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/28707"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/28713"}, {"source": "cve@mitre.org", "url": "http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9060483"}, {"source": "cve@mitre.org", "tags": ["US Government Resource"], "url": "http://www.kb.cert.org/vuls/id/776931"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/27576"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/27577"}, {"source": "cve@mitre.org", "url": "http://www.securitytracker.com/id?1019297"}, {"source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2008/0391/references"}, {"source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2008/0394/references"}, {"source": "cve@mitre.org", "url": "https://www.exploit-db.com/exploits/5049"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-119"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}