CVE-2008-5711

high · 9.3

Heap-based buffer overflow in the Facebook PhotoUploader ActiveX control 5.0.14.0 and earlier allows remote attackers to execute arbitrary code via a long FileMask property value.

9.3

CVSS

32.7%

EPSS (exploit prob.)

98th

EPSS percentile

2008-12-24

Published

AV:N/AC:M/Au:N/C:C/I:C/A:C

Weaknesses

CWE-119

Affected products

Vendor	Product	Affected versions
facebook	photouploader	<= 5.0.14.0
facebook	photouploader	4.5.57.0

Check a specific version with /api/v1/cve/match.

References

http://securityreason.com/securityalert/4805
http://www.securityfocus.com/bid/27756
https://www.exploit-db.com/exploits/5102
http://securityreason.com/securityalert/4805
http://www.securityfocus.com/bid/27756
https://www.exploit-db.com/exploits/5102

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2008-5711