Search
Find a vulnerability
Search criteria
ⓘ
Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.
4 vulnerabilities by ultrashareware
CVE-2008-3879 (GCVE-0-2008-3879)
Vulnerability from nvd – Published: 2008-09-02 15:00 – Updated: 2024-08-07 09:53
VLAI
Summary
The Ultra.OfficeControl ActiveX control in OfficeCtrl.ocx 2.0.2008.801 and earlier in Ultra Shareware Ultra Office Control allows remote attackers to force the download of arbitrary files onto a client system via a URL in the first argument to the Open method, in conjunction with a full destination pathname in the first argument (SaveAsDocument argument) to the Save method.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
7 references
| URL | Tags |
|---|---|
| https://www.exploit-db.com/exploits/6319 | exploitx_refsource_EXPLOIT-DB |
| http://securityreason.com/securityalert/4201 | third-party-advisoryx_refsource_SREASON |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://secunia.com/advisories/31632 | third-party-advisoryx_refsource_SECUNIA |
| http://www.shinnai.net/xplits/TXT_NPku7jFjRufaz85… | x_refsource_MISC |
| http://www.shinnai.net/index.php?mod=02_Forum&gro… | x_refsource_MISC |
| http://www.securityfocus.com/bid/30863 | vdb-entryx_refsource_BID |
Date Public
2008-08-27 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T09:53:00.494Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "6319",
"tags": [
"exploit",
"x_refsource_EXPLOIT-DB",
"x_transferred"
],
"url": "https://www.exploit-db.com/exploits/6319"
},
{
"name": "4201",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/4201"
},
{
"name": "uoc-ultraofficecontrol-file-overwrite(44750)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44750"
},
{
"name": "31632",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/31632"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://www.shinnai.net/xplits/TXT_NPku7jFjRufaz85U6Lxn.html"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://www.shinnai.net/index.php?mod=02_Forum\u0026group=Security\u0026argument=Remote_performed_exploits\u0026topic=1219827906.ff.php"
},
{
"name": "30863",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/30863"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2008-08-27T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "The Ultra.OfficeControl ActiveX control in OfficeCtrl.ocx 2.0.2008.801 and earlier in Ultra Shareware Ultra Office Control allows remote attackers to force the download of arbitrary files onto a client system via a URL in the first argument to the Open method, in conjunction with a full destination pathname in the first argument (SaveAsDocument argument) to the Save method."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-09-28T12:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "6319",
"tags": [
"exploit",
"x_refsource_EXPLOIT-DB"
],
"url": "https://www.exploit-db.com/exploits/6319"
},
{
"name": "4201",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/4201"
},
{
"name": "uoc-ultraofficecontrol-file-overwrite(44750)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44750"
},
{
"name": "31632",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/31632"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://www.shinnai.net/xplits/TXT_NPku7jFjRufaz85U6Lxn.html"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://www.shinnai.net/index.php?mod=02_Forum\u0026group=Security\u0026argument=Remote_performed_exploits\u0026topic=1219827906.ff.php"
},
{
"name": "30863",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/30863"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2008-3879",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The Ultra.OfficeControl ActiveX control in OfficeCtrl.ocx 2.0.2008.801 and earlier in Ultra Shareware Ultra Office Control allows remote attackers to force the download of arbitrary files onto a client system via a URL in the first argument to the Open method, in conjunction with a full destination pathname in the first argument (SaveAsDocument argument) to the Save method."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "6319",
"refsource": "EXPLOIT-DB",
"url": "https://www.exploit-db.com/exploits/6319"
},
{
"name": "4201",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/4201"
},
{
"name": "uoc-ultraofficecontrol-file-overwrite(44750)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44750"
},
{
"name": "31632",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/31632"
},
{
"name": "http://www.shinnai.net/xplits/TXT_NPku7jFjRufaz85U6Lxn.html",
"refsource": "MISC",
"url": "http://www.shinnai.net/xplits/TXT_NPku7jFjRufaz85U6Lxn.html"
},
{
"name": "http://www.shinnai.net/index.php?mod=02_Forum\u0026group=Security\u0026argument=Remote_performed_exploits\u0026topic=1219827906.ff.php",
"refsource": "MISC",
"url": "http://www.shinnai.net/index.php?mod=02_Forum\u0026group=Security\u0026argument=Remote_performed_exploits\u0026topic=1219827906.ff.php"
},
{
"name": "30863",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/30863"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2008-3879",
"datePublished": "2008-09-02T15:00:00.000Z",
"dateReserved": "2008-09-02T00:00:00.000Z",
"dateUpdated": "2024-08-07T09:53:00.494Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2008-3878 (GCVE-0-2008-3878)
Vulnerability from nvd – Published: 2008-09-02 15:00 – Updated: 2024-08-07 09:53
VLAI
Summary
Stack-based buffer overflow in the Ultra.OfficeControl ActiveX control in OfficeCtrl.ocx 2.0.2008.801 in Ultra Shareware Ultra Office Control allows remote attackers to execute arbitrary code via long strUrl, strFile, and strPostData parameters to the HttpUpload method.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
7 references
| URL | Tags |
|---|---|
| http://www.shinnai.net/xplits/TXT_RvfuIrwypWLMaiV… | x_refsource_MISC |
| https://www.exploit-db.com/exploits/6318 | exploitx_refsource_EXPLOIT-DB |
| http://secunia.com/advisories/31632 | third-party-advisoryx_refsource_SECUNIA |
| http://securityreason.com/securityalert/4200 | third-party-advisoryx_refsource_SREASON |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://www.securityfocus.com/bid/30861 | vdb-entryx_refsource_BID |
| http://www.shinnai.net/index.php?mod=02_Forum&gro… | x_refsource_MISC |
Date Public
2008-08-27 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T09:53:00.374Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://www.shinnai.net/xplits/TXT_RvfuIrwypWLMaiVn33Iy.html"
},
{
"name": "6318",
"tags": [
"exploit",
"x_refsource_EXPLOIT-DB",
"x_transferred"
],
"url": "https://www.exploit-db.com/exploits/6318"
},
{
"name": "31632",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/31632"
},
{
"name": "4200",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/4200"
},
{
"name": "uoc-ultraofficecontrol-bo(44749)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44749"
},
{
"name": "30861",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/30861"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://www.shinnai.net/index.php?mod=02_Forum\u0026group=Security\u0026argument=Remote_performed_exploits\u0026topic=1219826651.ff.php"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2008-08-27T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Stack-based buffer overflow in the Ultra.OfficeControl ActiveX control in OfficeCtrl.ocx 2.0.2008.801 in Ultra Shareware Ultra Office Control allows remote attackers to execute arbitrary code via long strUrl, strFile, and strPostData parameters to the HttpUpload method."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-09-28T12:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "http://www.shinnai.net/xplits/TXT_RvfuIrwypWLMaiVn33Iy.html"
},
{
"name": "6318",
"tags": [
"exploit",
"x_refsource_EXPLOIT-DB"
],
"url": "https://www.exploit-db.com/exploits/6318"
},
{
"name": "31632",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/31632"
},
{
"name": "4200",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/4200"
},
{
"name": "uoc-ultraofficecontrol-bo(44749)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44749"
},
{
"name": "30861",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/30861"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://www.shinnai.net/index.php?mod=02_Forum\u0026group=Security\u0026argument=Remote_performed_exploits\u0026topic=1219826651.ff.php"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2008-3878",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Stack-based buffer overflow in the Ultra.OfficeControl ActiveX control in OfficeCtrl.ocx 2.0.2008.801 in Ultra Shareware Ultra Office Control allows remote attackers to execute arbitrary code via long strUrl, strFile, and strPostData parameters to the HttpUpload method."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://www.shinnai.net/xplits/TXT_RvfuIrwypWLMaiVn33Iy.html",
"refsource": "MISC",
"url": "http://www.shinnai.net/xplits/TXT_RvfuIrwypWLMaiVn33Iy.html"
},
{
"name": "6318",
"refsource": "EXPLOIT-DB",
"url": "https://www.exploit-db.com/exploits/6318"
},
{
"name": "31632",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/31632"
},
{
"name": "4200",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/4200"
},
{
"name": "uoc-ultraofficecontrol-bo(44749)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44749"
},
{
"name": "30861",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/30861"
},
{
"name": "http://www.shinnai.net/index.php?mod=02_Forum\u0026group=Security\u0026argument=Remote_performed_exploits\u0026topic=1219826651.ff.php",
"refsource": "MISC",
"url": "http://www.shinnai.net/index.php?mod=02_Forum\u0026group=Security\u0026argument=Remote_performed_exploits\u0026topic=1219826651.ff.php"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2008-3878",
"datePublished": "2008-09-02T15:00:00.000Z",
"dateReserved": "2008-09-02T00:00:00.000Z",
"dateUpdated": "2024-08-07T09:53:00.374Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2008-3879 (GCVE-0-2008-3879)
Vulnerability from cvelistv5 – Published: 2008-09-02 15:00 – Updated: 2024-08-07 09:53
VLAI
Summary
The Ultra.OfficeControl ActiveX control in OfficeCtrl.ocx 2.0.2008.801 and earlier in Ultra Shareware Ultra Office Control allows remote attackers to force the download of arbitrary files onto a client system via a URL in the first argument to the Open method, in conjunction with a full destination pathname in the first argument (SaveAsDocument argument) to the Save method.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
7 references
| URL | Tags |
|---|---|
| https://www.exploit-db.com/exploits/6319 | exploitx_refsource_EXPLOIT-DB |
| http://securityreason.com/securityalert/4201 | third-party-advisoryx_refsource_SREASON |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://secunia.com/advisories/31632 | third-party-advisoryx_refsource_SECUNIA |
| http://www.shinnai.net/xplits/TXT_NPku7jFjRufaz85… | x_refsource_MISC |
| http://www.shinnai.net/index.php?mod=02_Forum&gro… | x_refsource_MISC |
| http://www.securityfocus.com/bid/30863 | vdb-entryx_refsource_BID |
Date Public
2008-08-27 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T09:53:00.494Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "6319",
"tags": [
"exploit",
"x_refsource_EXPLOIT-DB",
"x_transferred"
],
"url": "https://www.exploit-db.com/exploits/6319"
},
{
"name": "4201",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/4201"
},
{
"name": "uoc-ultraofficecontrol-file-overwrite(44750)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44750"
},
{
"name": "31632",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/31632"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://www.shinnai.net/xplits/TXT_NPku7jFjRufaz85U6Lxn.html"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://www.shinnai.net/index.php?mod=02_Forum\u0026group=Security\u0026argument=Remote_performed_exploits\u0026topic=1219827906.ff.php"
},
{
"name": "30863",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/30863"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2008-08-27T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "The Ultra.OfficeControl ActiveX control in OfficeCtrl.ocx 2.0.2008.801 and earlier in Ultra Shareware Ultra Office Control allows remote attackers to force the download of arbitrary files onto a client system via a URL in the first argument to the Open method, in conjunction with a full destination pathname in the first argument (SaveAsDocument argument) to the Save method."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-09-28T12:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "6319",
"tags": [
"exploit",
"x_refsource_EXPLOIT-DB"
],
"url": "https://www.exploit-db.com/exploits/6319"
},
{
"name": "4201",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/4201"
},
{
"name": "uoc-ultraofficecontrol-file-overwrite(44750)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44750"
},
{
"name": "31632",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/31632"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://www.shinnai.net/xplits/TXT_NPku7jFjRufaz85U6Lxn.html"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://www.shinnai.net/index.php?mod=02_Forum\u0026group=Security\u0026argument=Remote_performed_exploits\u0026topic=1219827906.ff.php"
},
{
"name": "30863",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/30863"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2008-3879",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The Ultra.OfficeControl ActiveX control in OfficeCtrl.ocx 2.0.2008.801 and earlier in Ultra Shareware Ultra Office Control allows remote attackers to force the download of arbitrary files onto a client system via a URL in the first argument to the Open method, in conjunction with a full destination pathname in the first argument (SaveAsDocument argument) to the Save method."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "6319",
"refsource": "EXPLOIT-DB",
"url": "https://www.exploit-db.com/exploits/6319"
},
{
"name": "4201",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/4201"
},
{
"name": "uoc-ultraofficecontrol-file-overwrite(44750)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44750"
},
{
"name": "31632",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/31632"
},
{
"name": "http://www.shinnai.net/xplits/TXT_NPku7jFjRufaz85U6Lxn.html",
"refsource": "MISC",
"url": "http://www.shinnai.net/xplits/TXT_NPku7jFjRufaz85U6Lxn.html"
},
{
"name": "http://www.shinnai.net/index.php?mod=02_Forum\u0026group=Security\u0026argument=Remote_performed_exploits\u0026topic=1219827906.ff.php",
"refsource": "MISC",
"url": "http://www.shinnai.net/index.php?mod=02_Forum\u0026group=Security\u0026argument=Remote_performed_exploits\u0026topic=1219827906.ff.php"
},
{
"name": "30863",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/30863"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2008-3879",
"datePublished": "2008-09-02T15:00:00.000Z",
"dateReserved": "2008-09-02T00:00:00.000Z",
"dateUpdated": "2024-08-07T09:53:00.494Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2008-3878 (GCVE-0-2008-3878)
Vulnerability from cvelistv5 – Published: 2008-09-02 15:00 – Updated: 2024-08-07 09:53
VLAI
Summary
Stack-based buffer overflow in the Ultra.OfficeControl ActiveX control in OfficeCtrl.ocx 2.0.2008.801 in Ultra Shareware Ultra Office Control allows remote attackers to execute arbitrary code via long strUrl, strFile, and strPostData parameters to the HttpUpload method.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
7 references
| URL | Tags |
|---|---|
| http://www.shinnai.net/xplits/TXT_RvfuIrwypWLMaiV… | x_refsource_MISC |
| https://www.exploit-db.com/exploits/6318 | exploitx_refsource_EXPLOIT-DB |
| http://secunia.com/advisories/31632 | third-party-advisoryx_refsource_SECUNIA |
| http://securityreason.com/securityalert/4200 | third-party-advisoryx_refsource_SREASON |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://www.securityfocus.com/bid/30861 | vdb-entryx_refsource_BID |
| http://www.shinnai.net/index.php?mod=02_Forum&gro… | x_refsource_MISC |
Date Public
2008-08-27 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T09:53:00.374Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://www.shinnai.net/xplits/TXT_RvfuIrwypWLMaiVn33Iy.html"
},
{
"name": "6318",
"tags": [
"exploit",
"x_refsource_EXPLOIT-DB",
"x_transferred"
],
"url": "https://www.exploit-db.com/exploits/6318"
},
{
"name": "31632",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/31632"
},
{
"name": "4200",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/4200"
},
{
"name": "uoc-ultraofficecontrol-bo(44749)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44749"
},
{
"name": "30861",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/30861"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://www.shinnai.net/index.php?mod=02_Forum\u0026group=Security\u0026argument=Remote_performed_exploits\u0026topic=1219826651.ff.php"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2008-08-27T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Stack-based buffer overflow in the Ultra.OfficeControl ActiveX control in OfficeCtrl.ocx 2.0.2008.801 in Ultra Shareware Ultra Office Control allows remote attackers to execute arbitrary code via long strUrl, strFile, and strPostData parameters to the HttpUpload method."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-09-28T12:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "http://www.shinnai.net/xplits/TXT_RvfuIrwypWLMaiVn33Iy.html"
},
{
"name": "6318",
"tags": [
"exploit",
"x_refsource_EXPLOIT-DB"
],
"url": "https://www.exploit-db.com/exploits/6318"
},
{
"name": "31632",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/31632"
},
{
"name": "4200",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/4200"
},
{
"name": "uoc-ultraofficecontrol-bo(44749)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44749"
},
{
"name": "30861",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/30861"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://www.shinnai.net/index.php?mod=02_Forum\u0026group=Security\u0026argument=Remote_performed_exploits\u0026topic=1219826651.ff.php"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2008-3878",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Stack-based buffer overflow in the Ultra.OfficeControl ActiveX control in OfficeCtrl.ocx 2.0.2008.801 in Ultra Shareware Ultra Office Control allows remote attackers to execute arbitrary code via long strUrl, strFile, and strPostData parameters to the HttpUpload method."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://www.shinnai.net/xplits/TXT_RvfuIrwypWLMaiVn33Iy.html",
"refsource": "MISC",
"url": "http://www.shinnai.net/xplits/TXT_RvfuIrwypWLMaiVn33Iy.html"
},
{
"name": "6318",
"refsource": "EXPLOIT-DB",
"url": "https://www.exploit-db.com/exploits/6318"
},
{
"name": "31632",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/31632"
},
{
"name": "4200",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/4200"
},
{
"name": "uoc-ultraofficecontrol-bo(44749)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44749"
},
{
"name": "30861",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/30861"
},
{
"name": "http://www.shinnai.net/index.php?mod=02_Forum\u0026group=Security\u0026argument=Remote_performed_exploits\u0026topic=1219826651.ff.php",
"refsource": "MISC",
"url": "http://www.shinnai.net/index.php?mod=02_Forum\u0026group=Security\u0026argument=Remote_performed_exploits\u0026topic=1219826651.ff.php"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2008-3878",
"datePublished": "2008-09-02T15:00:00.000Z",
"dateReserved": "2008-09-02T00:00:00.000Z",
"dateUpdated": "2024-08-07T09:53:00.374Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}