Secunia

Description
david130490 has discovered a vulnerability in Sony ImageStation AxRUploadControl Object ActiveX control, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to a boundary error in the AxRUploadServer.AxRUploadControl.1 ActiveX control (AxRUploadServer.dll) when handling arguments passed to the "SetLogging()" method. This can be exploited to cause a buffer overflow by passing an overly long string as argument to the affected method.

Successful exploitation allows execution of arbitrary code.

The vulnerability is confirmed in AxRUploadServer.dll version 1.0.0.38. Other versions may also be affected.

Solution
Set the kill-bit for the affected ActiveX control.

Provided and/or discovered by
david130490

Changelog
Further details available in Customer Area

Alternate/detailed remediation
Further details available in Customer Area

Deep Links
Links available in Customer Area