CVE-2008-3878

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 36.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2008-09-02 · updated 2026-06-16
Weakness: CWE-119

Description

Stack-based buffer overflow in the Ultra.OfficeControl ActiveX control in OfficeCtrl.ocx 2.0.2008.801 in Ultra Shareware Ultra Office Control allows remote attackers to execute arbitrary code via long strUrl, strFile, and strPostData parameters to the HttpUpload method.

Affected products

Ultrashareware Ultra Office Control: 2.0.2008.801

References

http://secunia.com/advisories/31632
http://securityreason.com/securityalert/4200
http://www.securityfocus.com/bid/30861
http://www.shinnai.net/index.php?mod=02_Forum&group=Security&argument=Remote_performed_exploits&topic=1219826651.ff.php
http://www.shinnai.net/xplits/TXT_RvfuIrwypWLMaiVn33Iy.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/44749
https://www.exploit-db.com/exploits/6318
http://secunia.com/advisories/31632
http://securityreason.com/securityalert/4200
http://www.securityfocus.com/bid/30861
http://www.shinnai.net/index.php?mod=02_Forum&group=Security&argument=Remote_performed_exploits&topic=1219826651.ff.php
http://www.shinnai.net/xplits/TXT_RvfuIrwypWLMaiVn33Iy.html

Get alerted when CVE-2008-3878 or the next vulnerability affects your stack