Description
eBay Enhanced Picture Uploader ActiveX control (EPUWALcontrol.dll) before 1.0.27 allows remote attackers to execute arbitrary commands via the PictureUrls property.
References
- 54968 vdb-entry
- 35412 third-party-advisory
- http://pages.ebay.com/securitycenter/activex/index.html
- 35248 vdb-entry
- VU#983731 third-party-advisory