Aurigma Image Uploader ActiveX Controls 'ExtractIptc/ExtractExif' Buffer Overflow Vulnerabilities

Aurigma Image Uploader ActiveX Controls 'ExtractIptc/ExtractExif' Buffer Overflow Vulnerabilities

Aurigma Image Uploader ActiveX controls are prone to multiple buffer-overflow vulnerabilities because they fail to perform adequate boundary checks on user-supplied data.

Successfully exploiting these issues allows remote attackers to execute arbitrary code in the context of the application using the ActiveX controls (typically Internet Explorer). Failed exploit attempts will result in denial-of-service conditions.

The issues affect the following versions:

ImageUploader4 4.5.70.0, 4.5.126.0, and 4.6.17.0
ImageUploader5 5.0.10.0

Other versions may also be vulnerable.