Image uploader bug blights MySpace

Security flaws in an ActiveX control used in MySpace upload images onto the social networking sites leave users open to attack. Facebook users may also be at risk. A buffer overflow vulnerability in Aurigma's Image Uploader Control Library might be used to compromise a user's system. The affected control is used for uploading images onto social networking sites using Microsoft's Internet Explorer. Users might be vulnerable if tricked into visiting a specially crafted web page that exploits the vulnerability.

The flaw was first reported by Elazar Broad on a full disclosure mailing list, who said that the vulnerable control was used by MySpace. Facebook also reportedly repackages the Aurigma control, though which version it uses is unclear. Broad reported the problem to Aurigma.

View: The full story @ The Reg

Report a problem with article
Previous Story

Mozilla Ups Firefox Bug Threat, Slates Fix for Feb. 5

Next Story

Alienware launches 4TB home server

2 Comments

Commenting is disabled on this article.

What?

Seriously, what?

ActiveX controls on a public website (rider: that isn't Microsoft owned)? :eek:

What kind of frickin idiot decided this was the right way to go?