CVE:CVE-2008-0659
CNNVD:CNNVD-200802-125
在MySpace MySpaceUploader.ocx 1.0.0.4运行的AURIgma Image Uploader ActiveX control (ImageUploader4.ocx) 4.5.70 及其早期版本中的基于堆的缓冲区溢出漏洞会允许远程攻击者通过一个长的Action属性来执行任意代码。
solution:Upgrade aurigma image_uploader_activex_control to a higher version than 4.5.70,and avoid the version (,4.5.70]; Upgrade myspace myspaceuploader to a higher version than 1.0.0.4,and avoid the version 1.0.0.4