CVE-2008-3878

{"id": "CVE-2008-3878", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 9.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "MEDIUM", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}]}, "published": "2008-09-02T15:41:00.000", "references": [{"url": "http://secunia.com/advisories/31632", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://securityreason.com/securityalert/4200", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/30861", "source": "cve@mitre.org"}, {"url": "http://www.shinnai.net/index.php?mod=02_Forum&group=Security&argument=Remote_performed_exploits&topic=1219826651.ff.php", "tags": ["URL Repurposed"], "source": "cve@mitre.org"}, {"url": "http://www.shinnai.net/xplits/TXT_RvfuIrwypWLMaiVn33Iy.html", "tags": ["Exploit", "URL Repurposed"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44749", "source": "cve@mitre.org"}, {"url": "https://www.exploit-db.com/exploits/6318", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/31632", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://securityreason.com/securityalert/4200", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/30861", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.shinnai.net/index.php?mod=02_Forum&group=Security&argument=Remote_performed_exploits&topic=1219826651.ff.php", "tags": ["URL Repurposed"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.shinnai.net/xplits/TXT_RvfuIrwypWLMaiVn33Iy.html", "tags": ["Exploit", "URL Repurposed"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44749", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.exploit-db.com/exploits/6318", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-119"}]}], "descriptions": [{"lang": "en", "value": "Stack-based buffer overflow in the Ultra.OfficeControl ActiveX control in OfficeCtrl.ocx 2.0.2008.801 in Ultra Shareware Ultra Office Control allows remote attackers to execute arbitrary code via long strUrl, strFile, and strPostData parameters to the HttpUpload method."}, {"lang": "es", "value": "Desbordamiento de b\u00fafer basado en pila en el control ActiveX Ultra.OfficeControl de OfficeCtrl.ocx 2.0.2008.801 de Ultra Shareware Ultra Office Control, permite a atacantes remotos ejecutar c\u00f3digo de su elecci\u00f3n mediante los par\u00e1metros largos strUrl, strFile y strPostData al m\u00e9todo HttpUpload."}], "lastModified": "2024-11-21T00:50:20.150", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ultrashareware:ultra_office_control:2.0.2008.801:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A81E8F3F-2263-4CBD-BA13-41E92D470A78"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}