← Back

Aurigma

aurigma

3 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Image Uploader Activex Control
image_uploader_activex_control
3 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2008-1490
2Aurigma
Piczo
2Image Uploader Activex Control
Imageuploader4
Apr 23, 2026
Mar 25, 2008
N/A· v4
N/A· v3
9.3 HIGH· v2
Buffer overflow in a certain Aurigma ActiveX control in ImageUploader4.ocx 4.1.36.0, as used with Piczo (aka Pizco) and possibly other online services, allows remote attackers to execute arbitrary code via unspecified ve...Show more
Buffer overflow in a certain Aurigma ActiveX control in ImageUploader4.ocx 4.1.36.0, as used with Piczo (aka Pizco) and possibly other online services, allows remote attackers to execute arbitrary code via unspecified vectors, possibly involving a long Action property, a different CLSID than CVE-2008-0659.Show less
CVE-2008-0660
2Aurigma
Facebook
3Facebook
Image Uploader Activex ControlPhotouploader
Apr 23, 2026
Feb 8, 2008
N/A· v4
N/A· v3
9.3 HIGH· v2
Multiple stack-based buffer overflows in Aurigma Image Uploader ActiveX control (ImageUploader4.ocx) 4.6.17.0, 4.5.70.0, and 4.5.126.0, and ImageUploader5 5.0.10.0, as used by Facebook PhotoUploader 4.5.57.0, allow remot...Show more
Multiple stack-based buffer overflows in Aurigma Image Uploader ActiveX control (ImageUploader4.ocx) 4.6.17.0, 4.5.70.0, and 4.5.126.0, and ImageUploader5 5.0.10.0, as used by Facebook PhotoUploader 4.5.57.0, allow remote attackers to execute arbitrary code via long (1) ExtractExif and (2) ExtractIptc properties.Show less
CVE-2008-0659
2Aurigma
Myspace
2Image Uploader Activex Control
Myspaceuploader
Apr 23, 2026
Feb 8, 2008
N/A· v4
N/A· v3
10.0 HIGH· v2
Stack-based buffer overflow in Aurigma Image Uploader ActiveX control (ImageUploader4.ocx) 4.5.70 and earlier, as used in MySpace MySpaceUploader.ocx 1.0.0.4, allows remote attackers to execute arbitrary code via a long...Show more
Stack-based buffer overflow in Aurigma Image Uploader ActiveX control (ImageUploader4.ocx) 4.5.70 and earlier, as used in MySpace MySpaceUploader.ocx 1.0.0.4, allows remote attackers to execute arbitrary code via a long Action property.Show less