CVE-2008-3878
Stack-based buffer overflow in the Ultra.OfficeControl ActiveX control in OfficeCtrl.ocx 2.0.2008.801 in Ultra Shareware Ultra Office Control allows remote attackers to execute arbitrary code via long strUrl, strFile, and strPostData parameters to the…
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 36.2%, higher than 98% of all known CVEs. Patch or mitigate before the next change window.
Description
Stack-based buffer overflow in the Ultra.OfficeControl ActiveX control in OfficeCtrl.ocx 2.0.2008.801 in Ultra Shareware Ultra Office Control allows remote attackers to execute arbitrary code via long strUrl, strFile, and strPostData parameters to the HttpUpload method.
- CVSS 2.0
- 9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C
- EPSS
- 36.23% probability · 98th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-119
- Affected
- ultrashareware/ultra office control
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/31632Vendor Advisory
- http://securityreason.com/securityalert/4200
- http://www.securityfocus.com/bid/30861
- http://www.shinnai.net/index.php?mod=02_Forum&group=Security&argument=Remote_performed_exploits&topic=1219826651.ff.phpURL Repurposed
- http://www.shinnai.net/xplits/TXT_RvfuIrwypWLMaiVn33Iy.htmlExploit, URL Repurposed
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44749
- https://www.exploit-db.com/exploits/6318
- http://secunia.com/advisories/31632Vendor Advisory
- http://securityreason.com/securityalert/4200
- http://www.securityfocus.com/bid/30861
- http://www.shinnai.net/index.php?mod=02_Forum&group=Security&argument=Remote_performed_exploits&topic=1219826651.ff.phpURL Repurposed
- http://www.shinnai.net/xplits/TXT_RvfuIrwypWLMaiVn33Iy.htmlExploit, URL Repurposed
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44749
- https://www.exploit-db.com/exploits/6318
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.