EUVD-2008-1492

Malware in sbrugna...

Aurigma Image Uploader 4.x ActiveX Control Multiple Remote Stack Buffer Overflow Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/26537/info Aurigma Image Uploader ActiveX control is prone to multiple stack-based buffer-overflow vulnerabilities because it fails to perform adequate boundary checks on user-supplied data. Successfully exploiting these...

VulnCheck KEV: CVE-2008-1490

Buffer overflow in a certain Aurigma ActiveX control in ImageUploader4.ocx 4.1.36.0, as used with Piczo aka Pizco and possibly other online services, allows remote attackers to execute arbitrary code via unspecified vectors, possibly involving a long Action property, a different CLSID than...

Aurigma Image Uploader多个ActiveX控件存在未明安全漏洞

BUGTRAQ ID: 30548 CNCAN ID：CNCAN-2008080603 Aurigma Image Uploader是一款功能强大的图像上传工具。 Aurigma Image Uploader多个ActiveX控件存在未明安全问题，远程攻击者可以利用漏洞以应用程序权限执行任意指令等攻击。 目前没有详细漏洞细节提供。 Aurigma Image Uploader 5.1 Aurigma Image Uploader 4.7 可参考如下解决方案工具： Aurigma Image Uploader 5.1 Aurigma AurigmaKillBit.zip...

Aurigma Multiple ActiveX Kill Bits

Microsoft Internet Explorer is the most widely used Internet browser. A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The flaw is located in multiple ActiveX Controls of Aurigma Image Uploader and of HP Instant Support HPISDataManager.dll. ActiveX controls...

Facebook PhotoUploader ActiveX control ExtractIptc buffer overflow

Added: 05/19/2008 CVE: CVE-2008-0660 BID: 27576 OSVDB: 41073 Background Facebook PhotoUploader is an ActiveX control which allows uploading of photos to the Facebook web site. It uses the Aurigma ImageUploader product. Problem A buffer overflow vulnerability in Facebook PhotoUploader allows comma...

Facebook PhotoUploader ActiveX control ExtractIptc buffer overflow

Added: 05/19/2008 CVE: CVE-2008-0660 BID: 27576 OSVDB: 41073 Background Facebook PhotoUploader is an ActiveX control which allows uploading of photos to the Facebook web site. It uses the Aurigma ImageUploader product. Problem A buffer overflow vulnerability in Facebook PhotoUploader allows comma...

Buffer overflow

Buffer overflow in a certain Aurigma ActiveX control in ImageUploader4.ocx 4.1.36.0, as used with Piczo aka Pizco and possibly other online services, allows remote attackers to execute arbitrary code via unspecified vectors, possibly involving a long Action property, a different CLSID than...

CVE-2008-1490

Buffer overflow in a certain Aurigma ActiveX control in ImageUploader4.ocx 4.1.36.0, as used with Piczo aka Pizco and possibly other online services, allows remote attackers to execute arbitrary code via unspecified vectors, possibly involving a long Action property, a different CLSID than...

CVE-2008-1490

CVE-2008-1490: Buffer overflow in Aurigma Image Uploader ActiveX control (ImageUploader4.ocx) affecting 4.5.70 and earlier (also older MySpace/Uploader variants like MySpaceUploader.ocx 1.0.0.4). Remote code execution is possible via a long Action property, with unspecified vectors; CLSID/version...

FaceBook / Aurigma Image / PhotoUploader / Piczo ImageUploader / ActiveX buffer overflow

Multiple buffer overflows in different properties...

Stack overflow

Multiple stack-based buffer overflows in Aurigma Image Uploader ActiveX control ImageUploader4.ocx 4.6.17.0, 4.5.70.0, and 4.5.126.0, and ImageUploader5 5.0.10.0, as used by Facebook PhotoUploader 4.5.57.0, allow remote attackers to execute arbitrary code via long 1 ExtractExif and 2 ExtractIptc...

CVE-2008-0659

Stack-based buffer overflow in Aurigma Image Uploader ActiveX control ImageUploader4.ocx 4.5.70 and earlier, as used in MySpace MySpaceUploader.ocx 1.0.0.4, allows remote attackers to execute arbitrary code via a long Action property...

Stack overflow

Stack-based buffer overflow in Aurigma Image Uploader ActiveX control ImageUploader4.ocx 4.5.70 and earlier, as used in MySpace MySpaceUploader.ocx 1.0.0.4, allows remote attackers to execute arbitrary code via a long Action property...

CVE-2008-0660

Multiple stack-based buffer overflows in Aurigma Image Uploader ActiveX control ImageUploader4.ocx 4.6.17.0, 4.5.70.0, and 4.5.126.0, and ImageUploader5 5.0.10.0, as used by Facebook PhotoUploader 4.5.57.0, allow remote attackers to execute arbitrary code via long 1 ExtractExif and 2 ExtractIptc...

CVE-2008-0660

The CVE-2008-0660 vulnerability affects the Aurigma Image Uploader ActiveX control (ImageUploader4.ocx: 4.6.17.0, 4.5.70.0, 4.5.126.0 and ImageUploader5: 5.0.10.0) as used by Facebook PhotoUploader 4.5.57.0. It is caused by stack-based buffer overflows in the ExtractExif and ExtractIptc propertie...

CVE-2008-0659

Stack-based buffer overflow in Aurigma Image Uploader ActiveX control ImageUploader4.ocx 4.5.70 and earlier, as used in MySpace MySpaceUploader.ocx 1.0.0.4, allows remote attackers to execute arbitrary code via a long Action property...

KLA10079 ACE vulnerability in Aurigma Image Uploader

A buffer overflow vulnerability was found in the Aurigma Image Uploader ActiveX control. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited from the network at a point related to unknown applications via specially designed properties...

[Full-disclosure] FaceBook/Aurigma Image/PhotoUploader Buffer Overflow

Who: FaceBook http://www.facebook.com Aurigma http://www.aurigma.com What: FaceBook uses Aurigma's ImageUploader control. This control enables users to upload photos to FaceBook. How: Please note that this vulnerability is DIFFERENT than the one that I previously posted. This also affects the sto...

FaceBook PhotoUploader (ImageUploader4.ocx 4.5.57.0) BOF Exploit

No description provided by source. !-- FaceBook PhotoUploader Buffer Overflow Exploit written by e.b. Tested on Windows XP SP2fully patched English, IE6, ImageUploader4.ocx 4.5.57.0FaceBookPhotoUploader2.cab The following controls are also vulnerable: Aurigma ImageUploader4 4.5.70.0 and 4.5.126.0...