critical9.3Public exploit code
CVE-2007-2563
Buffer overflow in the AddFile function in VersalSoft HTTP File Upload ActiveX control (UFileUploaderD.dll) allows remote attackers to execute arbitrary code v…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Versalsoft HTTP File Uploader - 'AddFile()' Remote Buffer Overflow2007-07-19 · remote · windows · Verified
- Versalsoft HTTP File Uploader - ActiveX 6.36 AddFile Remote Denial of Service2007-05-07 · dos · windows · Verified
Impact
Buffer overflow in the AddFile function in VersalSoft HTTP File Upload ActiveX control (UFileUploaderD.dll) allows remote attackers to execute arbitrary code via a long argument.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Versalsoft | Http File Upload Activex Control | All versions |
References
- NVD record
- CVE.org record
- http://moaxb.blogspot.com/2007/05/moaxb-07-versalsoft-http-file-uploader.html
- http://osvdb.org/34339
- http://secunia.com/advisories/25156
- http://www.securityfocus.com/bid/23853
- http://www.shinnai.altervista.org/moaxb/20070507/ufile.txt
- http://www.vupen.com/english/advisories/2007/1672
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34123
- http://moaxb.blogspot.com/2007/05/moaxb-07-versalsoft-http-file-uploader.html
- http://osvdb.org/34339
- http://secunia.com/advisories/25156
- http://www.securityfocus.com/bid/23853
- http://www.shinnai.altervista.org/moaxb/20070507/ufile.txt
- http://www.vupen.com/english/advisories/2007/1672
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34123