← Back

Photouploader

photouploader

Vendor: Facebook • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Facebook
1Photouploader
Apr 23, 2026
Dec 24, 2008
N/A· v4
N/A· v3
9.3 HIGH· v2
Heap-based buffer overflow in the Facebook PhotoUploader ActiveX control 5.0.14.0 and earlier allows remote attackers to execute arbitrary code via a long FileMask property value.
2Aurigma
Facebook
3Facebook
Image Uploader Activex ControlPhotouploader
Apr 23, 2026
Feb 8, 2008
N/A· v4
N/A· v3
9.3 HIGH· v2
Multiple stack-based buffer overflows in Aurigma Image Uploader ActiveX control (ImageUploader4.ocx) 4.6.17.0, 4.5.70.0, and 4.5.126.0, and ImageUploader5 5.0.10.0, as used by Facebook PhotoUploader 4.5.57.0, allow remot...Show more
Multiple stack-based buffer overflows in Aurigma Image Uploader ActiveX control (ImageUploader4.ocx) 4.6.17.0, 4.5.70.0, and 4.5.126.0, and ImageUploader5 5.0.10.0, as used by Facebook PhotoUploader 4.5.57.0, allow remote attackers to execute arbitrary code via long (1) ExtractExif and (2) ExtractIptc properties.Show less