CVE-2008-1490: Aurigma Image Uploader Activex Control

High severity, CVSS 9.3. EPSS: 4% chance of exploitation in the next 30 days.

Buffer overflow in a certain Aurigma ActiveX control in ImageUploader4.ocx 4.1.36.0, as used with Piczo (aka Pizco) and possibly other online services, allows remote attackers to execute arbitrary code via unspecified vectors, possibly involving a long Action property, a different CLSID than CVE-2008-0659.

Affected products

• Aurigma Image Uploader Activex Control: version 4.1.36.0 only
• Piczo IMAGEUPLOADER4: version 4.1.36.0 only

Published 2008-03-25. Last modified 2026-06-16.