CVE-2007-2563

Published: May 9, 2007Modified: Apr 23, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Buffer overflow in the AddFile function in VersalSoft HTTP File Upload ActiveX control (UFileUploaderD.dll) allows remote attackers to execute arbitrary code via a long argument.

Affected (1)

Products: Versalsoft: Http File Upload Activex Control

Versalsoft

1 product

Http File Upload Activex Control

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Versalsoft Http File Upload Activex Control	All versions

References (14)

http://moaxb.blogspot.com/2007/05/moaxb-07-versalsoft-http-file-uploader.html

Source: cve@mitre.org

http://osvdb.org/34339

Source: cve@mitre.org

http://secunia.com/advisories/25156

Source: cve@mitre.org

PatchVendor Advisory

http://www.securityfocus.com/bid/23853

Source: cve@mitre.org

http://www.shinnai.altervista.org/moaxb/20070507/ufile.txt

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/1672

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/34123

Source: cve@mitre.org

http://moaxb.blogspot.com/2007/05/moaxb-07-versalsoft-http-file-uploader.html