CVE-2008-5711

Heap-based buffer overflow in the Facebook PhotoUploader ActiveX control 5.0.14.0 and earlier allows remote attackers to execute arbitrary code via a long FileMask property value.

Score

CVSS 2.0 9.3 Critical

Status

Modified - cve@mitre.org

Published

2008-12-24

Last modified

2024-08-07

Weaknesses

CWE-119

Affected products

• Photouploader (Facebook)

References

• http://securityreason.com/securityalert/4805
• http://www.securityfocus.com/bid/27756
• https://www.exploit-db.com/exploits/5102