CVE:CVE-2008-4493
CNNVD:CNNVD-200810-119
Microsoft PicturePusher ActiveX控件(PipPPush.DLL 7.00.0709),在Microsoft Digital Image 2006 Starter Edition中使用时,远程攻击者可以通过运行AddString和Post方法以及一个修改过的PostURL来构建一个HTTP POST请求以强制任意文件上传。
solution:Upgrade microsoft digital_image to a higher version than 2006:unknown,and avoid the version 2006:unknown