Description
Buffer overflow in a certain Aurigma ActiveX control in ImageUploader4.ocx 4.1.36.0, as used with Piczo (aka Pizco) and possibly other online services, allows remote attackers to execute arbitrary code via unspecified vectors, possibly involving a long Action property, a different CLSID than CVE-2008-0659.
References
- 28354 vdb-entry
- aurigma-imageuploader41-bo(40152) vdb-entry
- 20080320 Pizco vulnerable to buffer overflow in activex mailing-list
- 29445 third-party-advisory