Aurigma Image Uploader 'ImageUploader4.ocx' ActiveX Control Buffer Overflow Vulnerability

Bugtraq ID:	27539
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Jan 31 2008 12:00AM
Updated:	Aug 25 2008 04:05PM
Credit:	Elazar Broad discovered this vulnerability.
Vulnerable:	Aurigma ImageUploader 4.5.70 Aurigma ImageUploader 4.5.50 .0
Not Vulnerable:	Aurigma ImageUploader 4.6.17 .0

Aurigma Image Uploader 'ImageUploader4.ocx' ActiveX Control Buffer Overflow Vulnerability

Aurigma Image Uploader ActiveX control is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data.

Successfully exploiting this issue may allow remote attackers to execute arbitrary code in the context of the application using the ActiveX control (typically Internet Explorer). Failed exploit attempts likely result in denial-of-service conditions.

Image Uploader 4.5.70.0 is vulnerable; other versions may also be affected.

NOTE: This issue may be related to the issues covered in BID 27533 (MySpace Uploader 'MySpaceUploader.ocx' ActiveX Control Buffer Overflow) and BID 27534 (Facebook Photo Uploader 4 'ImageUploader4.1.ocx' ActiveX Control Buffer Overflow Vulnerability).

Aurigma Image Uploader 'ImageUploader4.ocx' ActiveX Control Buffer Overflow Vulnerability

The following exploit code is available:

• /data/vulnerabilities/exploits/27539.html

Aurigma Image Uploader 'ImageUploader4.ocx' ActiveX Control Buffer Overflow Vulnerability

Solution:
Reportedly, version 4.6.17.0 of the ActiveX control is not vulnerable to this issue. Please see the referenced advisories for more information.

Aurigma Image Uploader 'ImageUploader4.ocx' ActiveX Control Buffer Overflow Vulnerability

References:

• Aurigma Image Uploader Homepage (Aurigma)
  
• Microsoft Knowledge Base Article 240797 (Microsoft)
  
• Microsoft Security Advisory (953839) Cumulative Security Update of ActiveX Kill (Microsoft)