Description
Multiple stack-based buffer overflows in the Lateral Arts Photobox uploader ActiveX control 1.x before 1.3, and 2.2.0.6, allow remote attackers to execute arbitrary code via a long URL string for the (1) LogURL, (2) ConnectURL, (3) SkinURL, (4) AlbumCreateURL, (5) ErrorURL, or (6) httpsinglehost property value.
References
- 37187 vdb-entry
- 37492 third-party-advisory
- http://secunia.com/secunia_research/2009-41/
- ADV-2009-3377 vdb-entry
- 37138 third-party-advisory
- ADV-2009-3376 vdb-entry
- 20091202 Secunia Research: Lateral Arts Photobox uploader ActiveX Control Buffer Overflow mailing-list