CVE-2008-3878

Stack-based buffer overflow in the Ultra.OfficeControl ActiveX control in OfficeCtrl.ocx 2.0.2008.801 in Ultra Shareware Ultra Office Control allows remote attackers to execute arbitrary code via long strUrl, strFile, and strPostData parameters to the HttpUpload method.

• CWE-119

• http://secunia.com/advisories/31632Vendor Advisory
• http://securityreason.com/securityalert/4200
• http://www.securityfocus.com/bid/30861
• http://www.shinnai.net/index.php?mod=02_Forum&group=Security&argument=Remote_performed_exploits&topic=1219826651.ff.phpURL Repurposed
• http://www.shinnai.net/xplits/TXT_RvfuIrwypWLMaiVn33Iy.htmlExploit, URL Repurposed
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44749
• https://www.exploit-db.com/exploits/6318
• http://secunia.com/advisories/31632Vendor Advisory
• http://securityreason.com/securityalert/4200
• http://www.securityfocus.com/bid/30861
• http://www.shinnai.net/index.php?mod=02_Forum&group=Security&argument=Remote_performed_exploits&topic=1219826651.ff.phpURL Repurposed
• http://www.shinnai.net/xplits/TXT_RvfuIrwypWLMaiVn33Iy.htmlExploit, URL Repurposed
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44749
• https://www.exploit-db.com/exploits/6318

Published

Sep 2, 2008

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-3872Adobe Flash Player 8.0.39.0 and earlier, and 9.x up to 9.0.1…
• CVE-2008-3873The System.setClipboard method in ActionScript in Adobe Flas…
• CVE-2008-3874Cross-site scripting (XSS) vulnerability in account.php in L…
• CVE-2008-3875The kernel in Sun Solaris 8 through 10 and OpenSolaris befor…
• CVE-2008-3876Apple iPhone 2.0.2, in some configurations, allows physicall…
• CVE-2008-3877Stack-based buffer overflow in Acoustica Mixcraft 4.1 Build …
• CVE-2008-3879The Ultra.OfficeControl ActiveX control in OfficeCtrl.ocx 2.…
• CVE-2008-3880SQL injection vulnerability in zm_html_view_event.php in Zon…
• CVE-2008-3881Multiple cross-site scripting (XSS) vulnerabilities in ZoneM…
• CVE-2008-3882Unspecified "Command Injection" vulnerability in ZoneMinder …
• CVE-2008-3883configvar in Caudium 1.4.12 allows local users to overwrite …
• CVE-2008-3884Cross-site scripting (XSS) vulnerability in Blogn (BURO GUN)…