CVE-2008-0659: aurigma image_uploader_activex_control

CVSS: 10.0v2.0HighModified

Published 08-02-2008Last modified 07-08-2024

Vulnerability summary

CVE-2008-0659 is a high (CVSS 10.0) vulnerability in aurigma image_uploader_activex_control. EPSS estimates a 56.34% chance of exploitation in the next 30 days, higher than 99% of scored vulnerabilities. 2 public exploits are recorded.

Overall risk

90/100

0100

Critical · default modelHow is this calculated?

CVSS score

10.0/10

010

High · v2.0 (NVD)

EPSS score

56.34%

0%100%

Critical · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits2reference, exploit-database

Timeline

08-02-2008
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

Stack-based buffer overflow in Aurigma Image Uploader ActiveX control (ImageUploader4.ocx) 4.5.70 and earlier, as used in MySpace MySpaceUploader.ocx 1.0.0.4, allows remote attackers to execute arbitrary code via a long Action property.

CVSS metrics

1 score · 1 source · 1 version

v2.010.0

EPSS trend

Probability

56.34%

Chance of exploitation in the next 30 days

Percentile

99%

Versus all other CVEs

30-day change

0.00 pp

From 56.34% on 20-09-2026

20-09-202620-10-2026

EPSS score

56.34%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

2 found

referenceUnverified
Exploit Reference (securityfocus.com)
Maturity: unknown
exploit-databaseremotewindowsVerified
MySpace Uploader - 'MySpaceUploader.ocx 1.0.0.4' Remote Buffer Overflow
Maturity: weaponized