CVE-2008-3878

Stack-based buffer overflow in the Ultra.OfficeControl ActiveX control in OfficeCtrl.ocx 2.0.2008.801 in Ultra Shareware Ultra Office Control allows remote attackers to execute arbitrary code via long strUrl, strFile, and strPostData parameters to the HttpUpload method.

Link	Resource
http://www.shinnai.net/index.php?mod=02_Forum&group=Security&argument=Remote_performed_exploits&topic=1219826651.ff.php
http://www.shinnai.net/xplits/TXT_RvfuIrwypWLMaiVn33Iy.html	Exploit
http://www.securityfocus.com/bid/30861
http://secunia.com/advisories/31632	Vendor Advisory
http://securityreason.com/securityalert/4200
https://exchange.xforce.ibmcloud.com/vulnerabilities/44749
https://www.exploit-db.com/exploits/6318

Configuration 1

cpe:2.3:a:ultrashareware:ultra_office_control:2.0.2008.801:*:*:*:*:*:*:*

---

Published : 2008-09-02 03:41

Updated : 2017-09-29 01:31

---

NVD link : CVE-2008-3878

Mitre link : CVE-2008-3878

No products.

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer