- 28 May 2008Advisories » PhotoStockPlus Uploader Tool ActiveX Control Remote Buffer Overflow Vulnerabilities
| Release Date: | 20/05/2008 | Severity: | Highly Critical  |
| SecWatch Advisory: | SWID1021241 | Cause: | Boundary error |
| Solution Status: | Unpatched | Impact: | Execution of arbitrary code |
| Exploit Status: | None Available | Access Vector: | From remote |
| Affected Software: | PhotoStockPlus Uploader Tool ActiveX Control 1.x | ||
| References: | FrSIRT/ADV-2008-1571 |
||
| CVE: | CVE-2008-0957 | ||
| US Cert: | VU#406937 | ||
| Secunia: | SA30305 | ||
| Bugtraq ID: | BID#29279 | ||
Description:
A vulnerability in PhotoStockPlus Uploader Tool ActiveX control has been reported, which can be exploited by remote users to compromise a vulnerable system.
Boundary errors exist when handling certain initialization parameters within the PhotoStockPlus Uploader Tool ActiveX control (PSPUploader.ocx), which can be exploited to cause stack-based buffer overflows and execute arbitrary code.
Solution:
There was no vendor-supplied solution at the time of entry.
Set the kill-bit for the affected ActiveX control CLSID {E48BB416-C578-4A62-84C9-5E3389ABE5FC}.
Credits:
Free Vulnerability Notification Service
Receive free instant and customisable notifications of new vulnerabilities or exploits via e-mail, web or RSS feeds. Click here for more information.