header-logo
Suggest Exploit
vendor:
Image Uploader
by:
Unknown
7.5
CVSS
HIGH
Stack-based Buffer Overflow
119
CWE
Product Name: Image Uploader
Affected Version From: Version prior to Aurigma Image Uploader 4.5.70
Affected Version To: 4.5.69
Patch Exists: YES
Related CWE:
CPE: a:aurigma:image_uploader:4.5.69
Metasploit:
Other Scripts:
Platforms Tested: Windows
2007

Aurigma Image Uploader ActiveX Control Multiple Stack-based Buffer Overflow Vulnerabilities

The Aurigma Image Uploader ActiveX control is prone to multiple stack-based buffer-overflow vulnerabilities because it fails to perform adequate boundary checks on user-supplied data. Successfully exploiting these issues allows remote attackers to execute arbitrary code in the context of the application using the ActiveX control (typically Internet Explorer). Failed exploit attempts likely result in denial-of-service conditions.

Mitigation:

Upgrade to Aurigma Image Uploader version 4.5.70 or later.
Source

Exploit-DB raw data: