CVE-2008-4493

The CVE describes a vulnerability in the Microsoft PicturePusher ActiveX control (PipPPush.DLL 7.00.0709) used by Microsoft Digital Image 2006 Starter Edition. The flaw arises from the AddString and Post methods, with a modified PostURL that allows an attacker to construct an HTTP POST request to...