CVE-2008-5711

Heap-based buffer overflow in the Facebook PhotoUploader ActiveX control 5.0.14.0 and earlier allows remote attackers to execute arbitrary code via a long FileMask property value...

Heap overflow

Heap-based buffer overflow in the Facebook PhotoUploader ActiveX control 5.0.14.0 and earlier allows remote attackers to execute arbitrary code via a long FileMask property value...

CVE-2008-5711

CVE-2008-5711 is a heap-based buffer overflow in the Facebook Photo Uploader ActiveX control (ImageUploader4.ocx) prior to 5.0.14.0, with remote code execution possible via overly long input to properties such as FileMask or ExtractIptc/ExtractExif. Public references indicate multiple buffer over...

CVE-2008-5711

Heap-based buffer overflow in the Facebook PhotoUploader ActiveX control 5.0.14.0 and earlier allows remote attackers to execute arbitrary code via a long FileMask property value...

CVE-2008-5711: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the Facebook PhotoUploader ActiveX control 5.0.14.0 and earlier allows remote attackers to execute arbitrary code via a long FileMask property value...

Facebook Cross Site Scripting

Found in August, I tried to alert facebook as quickly as was possible - however I received no further correspondence to my communications. At time of writing, it was possible to exploit both Firefox 3 and IE 7 - by simply using an IFRAME or even an object tag. Dependant on the browser target This...

Facebook Newsroom 'includes/home.php'远程文件包含漏洞

BUGTRAQ ID: 30185 CNCAN ID：CNCAN-2008071405 Facebook Newsroom CMS是一款内容管理程序。 Facebook Newsroom CMS不正确处理用户提交的WEB参数，远程攻击者可以利用漏洞以应用程序权限执行任意PHP代码。 问题是'home.php'脚本对用户提交给'path'参数缺少过滤，构建特殊的文件作为包含参数，可导致以应用程序权限执行任意PHP代码。 NewsCloud Facebook Newsroom CMS 0.5.0 Beta 1 目前没有解决方案提供：...

Facebook Newsroom CMS 0.5.0 Beta 1 Remote File Inclusion Vulnerability

No description provided by source. Facebook Newsroom Application Remote File Inclusion Vulnerability Discovered by : Ciph3r MAIL : [email protected] SP tanx4: Iranian hacker & Kurdish security TEAM sp TANX2: milw0rm.com & google.com & sourceforge.net CMS download :...

facebookcms-rfi.txt

Facebook Newsroom Application Remote File Inclusion Vulnerability Discovered by : Ciph3r MAIL : [email protected] SP tanx4: Iranian hacker & Kurdish security TEAM sp TANX2: milw0rm.com & google.com & sourceforge.net CMS download : http://sourceforge.net/project/showfiles.php?groupid=221515...

Facebook Newsroom CMS 0.5.0 Beta 1 Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ====================================================================== Facebook Newsroom CMS 0.5.0 Beta 1 Remote File Inclusion Vulnerability ====================================================================== Facebook Newsroom...

facebook newsroom CMS 0.5.0 Beta 1 - Remote File Inclusion

facebook newsroom CMS 0.5.0 Beta 1 - Remote File Inclusion Facebook Newsroom Application Remote File Inclusion Vulnerability Discovered by : Ciph3r MAIL : [email protected] SP tanx4: Iranian hacker & Kurdish security TEAM sp TANX2: milw0rm.com & google.com & sourceforge.net CMS download :...

facebook newsroom CMS 0.5.0 Beta 1 - Remote File Inclusion

Facebook Newsroom Application Remote File Inclusion Vulnerability Discovered by : Ciph3r MAIL : [email protected] SP tanx4: Iranian hacker & Kurdish security TEAM sp TANX2: milw0rm.com & google.com & sourceforge.net CMS download : http://sourceforge.net/project/showfiles.php?groupid=221515...

Facebook PhotoUploader ActiveX control ExtractIptc buffer overflow

Added: 05/19/2008 CVE: CVE-2008-0660 BID: 27576 OSVDB: 41073 Background Facebook PhotoUploader is an ActiveX control which allows uploading of photos to the Facebook web site. It uses the Aurigma ImageUploader product. Problem A buffer overflow vulnerability in Facebook PhotoUploader allows comma...

Facebook PhotoUploader ActiveX control ExtractIptc buffer overflow

Added: 05/19/2008 CVE: CVE-2008-0660 BID: 27576 OSVDB: 41073 Background Facebook PhotoUploader is an ActiveX control which allows uploading of photos to the Facebook web site. It uses the Aurigma ImageUploader product. Problem A buffer overflow vulnerability in Facebook PhotoUploader allows comma...

Facebook PhotoUploader ActiveX control ExtractIptc buffer overflow

Added: 05/19/2008 CVE: CVE-2008-0660 BID: 27576 OSVDB: 41073 Background Facebook PhotoUploader is an ActiveX control which allows uploading of photos to the Facebook web site. It uses the Aurigma ImageUploader product. Problem A buffer overflow vulnerability in Facebook PhotoUploader allows comma...

Facebook PhotoUploader ActiveX control ExtractIptc buffer overflow

Added: 05/19/2008 CVE: CVE-2008-0660 BID: 27576 OSVDB: 41073 Background Facebook PhotoUploader is an ActiveX control which allows uploading of photos to the Facebook web site. It uses the Aurigma ImageUploader product. Problem A buffer overflow vulnerability in Facebook PhotoUploader allows comma...

Update Protection against Facebook Photo Uploader ActiveX Control FileMask Method Buffer Overflow Vulnerability

A buffer overflow vulnerability has been reported in the Facebook Photo Uploader ActiveX control. Facebook is a social networking website that allows users to upload albums and photos. By convincing a user to visit a specially crafted Web page, a remote attacker may trigger this vulnerability to...

FaceBook / Aurigma Image / PhotoUploader / Piczo ImageUploader / ActiveX buffer overflow

Multiple buffer overflows in different properties...

FaceBook PhotoUploader <= 5.0.14.0 Remote Buffer Overflow Exploit

No description provided by source. html head object id="target" classid="clsid:5C6698D9-7BE4-4122-8EC5-291D84DBD4A0"/object /head body script var shellcode = unescape"%u0D0D%u0D0D%u9090%u9090"+ //Windows Execute Command calc "%ue8fc%u0044%u0000%u458b%u8b3c%u057c%u0178%u8bef%u184f%u5f8b"+...

FaceBook PhotoUploader 5.0.14.0 - Remote Buffer Overflow

FaceBook PhotoUploader 5.0.14.0 - Remote Buffer Overflow var shellcode = unescape"%u0D0D%u0D0D%u9090%u9090"+ //Windows Execute Command calc "%ue8fc%u0044%u0000%u458b%u8b3c%u057c%u0178%u8bef%u184f%u5f8b"+ "%u0120%u49eb%u348b%u018b%u31ee%u99c0%u84ac%u74c0%uc107%u0dca"+...