漏洞信息详情
MySpace Uploader 'MySpaceUploader.ocx' ActiveX Control 缓冲区溢出漏洞
漏洞简介
在MySpace MySpaceUploader.ocx 1.0.0.4运行的AURIgma Image Uploader ActiveX control (ImageUploader4.ocx) 4.5.70 及其早期版本中的基于堆的缓冲区溢出漏洞会允许远程攻击者通过一个长的Action属性来执行任意代码。
漏洞公告
参考网址
来源: US-CERT 名称: VU#776931 链接:http://www.kb.cert.org/vuls/id/776931 来源: XF 名称: myspace-myspaceuploader-bo(40118) 链接:http://xforce.iss.net/xforce/xfdb/40118 来源: BID 名称: 27533 链接:http://www.securityfocus.com/bid/27533 来源: MILW0RM 名称: 5025 链接:http://www.milw0rm.com/exploits/5025 来源: VUPEN 名称: ADV-2008-0345 链接:http://www.frsirt.com/english/advisories/2008/0345/references 来源: VUPEN 名称: ADV-2008-0344 链接:http://www.frsirt.com/english/advisories/2008/0344/references 来源: MISC 链接:http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9060483 来源: SECUNIA 名称: 28733 链接:http://secunia.com/advisories/28733 来源: SECUNIA 名称: 28715 链接:http://secunia.com/advisories/28715 来源: FULLDISC 名称: 20080131 MySpace Uploader ActiveX Control Buffer Overflow 链接:http://seclists.org/fulldisclosure/2008/Jan/0593.html 来源: blogs.aurigma.com 链接:http://blogs.aurigma.com/post/2008/01/Another-security-problem---oh%2c-not-again.aspx
受影响实体
- Aurigma Image_uploader_activex_control:4.5.70<!--2000-1-1-->
补丁
暂无
还没有评论,来说两句吧...