CVE-2008-3878

critical

Description

Stack-based buffer overflow in the Ultra.OfficeControl ActiveX control in OfficeCtrl.ocx 2.0.2008.801 in Ultra Shareware Ultra Office Control allows remote attackers to execute arbitrary code via long strUrl, strFile, and strPostData parameters to the HttpUpload method.

References

https://www.exploit-db.com/exploits/6318

https://exchange.xforce.ibmcloud.com/vulnerabilities/44749

http://www.shinnai.net/index.php?mod=02_Forum&group=Security&argument=Remote_performed_exploits&topic=1219826651.ff.php

http://www.securityfocus.com/bid/30861

http://securityreason.com/securityalert/4200

http://secunia.com/advisories/31632

Details

Source: Mitre, NVD

Published: 2008-09-02

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 9.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C

Severity: High

CVSS v3

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: Critical

EPSS

EPSS: 0.36228