CVE-2008-0660: Aurigma Image Uploader Activex Control

High severity, CVSS 9.3. EPSS: 37.8% chance of exploitation in the next 30 days.

Multiple stack-based buffer overflows in Aurigma Image Uploader ActiveX control (ImageUploader4.ocx) 4.6.17.0, 4.5.70.0, and 4.5.126.0, and ImageUploader5 5.0.10.0, as used by Facebook PhotoUploader 4.5.57.0, allow remote attackers to execute arbitrary code via long (1) ExtractExif and (2) ExtractIptc properties.

Affected products

• Aurigma Image Uploader Activex Control: version 4.5.70.0 only; version 4.5.126.0 only; version 4.6.17.0 only; version 5.0.10.0 only
• Facebook Facebook: any version
• Facebook Photouploader: version 4.5.57.0 only

Published 2008-02-08. Last modified 2026-06-16.