Facebook Photouploader vulnerabilities

2 CVEs affecting Facebook Photouploader, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2008-5711, published 2008-12-24.

More from Facebook.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2008-0660, published 2008-02-08. High severity, CVSS 9.3. EPSS: 37.8% chance of exploitation in the next 30 days. Multiple stack-based buffer overflows in Aurigma Image Uploader ActiveX control (ImageUploader4.ocx) 4.6.17.0, 4.5.70.0, and 4.5.126.0, and ImageUploader5 5.0.10.0, as used by Facebook PhotoUploader…
• CVE-2008-5711, published 2008-12-24. High severity, CVSS 9.3. EPSS: 32.7% chance of exploitation in the next 30 days. Heap-based buffer overflow in the Facebook PhotoUploader ActiveX control 5.0.14.0 and earlier allows remote attackers to execute arbitrary code via a long FileMask property value.