CVE-2008-0659
Stack-based buffer overflow in Aurigma Image Uploader ActiveX control (ImageUploader4.ocx) 4.5.70...
CVE-2008-0659 is a high vulnerability (CVSS 10.0) in Aurigma Image Uploader Activex Control, published February 8, 2008. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 56.3%, the 99th percentile. No source names a fixed version.
- Severity
- 10.0 HighCVSS 2.0, NVD
- Exploit chance
- 56.3%EPSS, 99th percentile
- Exploitation
- None known1 public exploit
- Fixed in
- No fix listedNo source names one
Description
Stack-based buffer overflow in Aurigma Image Uploader ActiveX control (ImageUploader4.ocx) 4.5.70 and earlier, as used in MySpace MySpaceUploader.ocx 1.0.0.4, allows remote attackers to execute arbitrary code via a long Action property.
Exploit likelihood
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | MySpace Uploader - 'MySpaceUploader.ocx 1.0.0.4' Remote Buffer Overflow | 2008-01-31 |
What each source reports
NVD Score used
Stack-based buffer overflow in Aurigma Image Uploader ActiveX control (ImageUploader4.ocx) 4.5.70 and earlier, as used in MySpace MySpaceUploader.ocx 1.0.0.4, allows remote attackers to execute arbitrary code via a long Action property.
- Record
CVE-2008-0659- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE ListNo score
Stack-based buffer overflow in Aurigma Image Uploader ActiveX control (ImageUploader4.ocx) 4.5.70 and earlier, as used in MySpace MySpaceUploader.ocx 1.0.0.4, allows remote attackers to execute arbitrary code via a long Action property.
- Record
CVE-2008-0659- Updated
- 2026-11-02
EUVDEUVD-2008-0669No score
Stack-based buffer overflow in Aurigma Image Uploader ActiveX control (ImageUploader4.ocx) 4.5.70 and earlier, as used in MySpace MySpaceUploader.ocx 1.0.0.4, allows remote attackers to execute arbitrary code via a long Action property.
- Record
EUVD-2008-0669- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-8pc6-h9qw-hq8qNo score
Stack-based buffer overflow in Aurigma Image Uploader ActiveX control (ImageUploader4.ocx) 4.5.70...
Stack-based buffer overflow in Aurigma Image Uploader ActiveX control (ImageUploader4.ocx) 4.5.70 and earlier, as used in MySpace MySpaceUploader.ocx 1.0.0.4, allows remote attackers to execute arbitrary code via a long Action property.
- Record
GHSA-8pc6-h9qw-hq8q- Weakness
- CWE-119
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
secunia.com/advisories/28733
blogs.aurigma.com/post/2008/01/Another-security-problem---oh%2c-not-again.aspx
securityfocus.com/bid/27533
seclists.org/fulldisclosure/2008/Jan/0593.html
exchange.xforce.ibmcloud.com/vulnerabilities/40118
Show 7 moreShow less
vupen.com/english/advisories/2008/0345/references
kb.cert.org/vuls/id/776931
exploit-db.com/exploits/5025
computerworld.com/action/article.do?command=viewArticleBasic&articleId=9060483
nvd.nist.gov/vuln/detail/CVE-2008-0659
github.com/advisories/GHSA-8pc6-h9qw-hq8q