CVE-2008-3878

Stack-based buffer overflow in the Ultra.OfficeControl ActiveX control in OfficeCtrl.ocx 2.0.2008.801 in Ultra Shareware Ultra Office Control allows remote attackers to execute arbitrary code via long strUrl, strFile, and strPostData parameters to the HttpUpload method.

CVSS v2.0

9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

36.23% chance of exploitation in the next 30 days, 98th percentile

Published

2008-09-02

Updated

2024-08-07

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/ultraoffice_http…

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/16513
• https://www.exploit-db.com/exploits/6318

References

• CVE Record
• NVD entry

Related

• CVE-2008-3877
• CVE-2008-3879
• CVE-2008-3861
• CVE-2008-3888
• CVE-2008-3859
• CVE-2008-3889