CVE-2008-0492

CVE-2008-0492 describes a stack-based buffer overflow vulnerability in the Persits.XUpload.2 ActiveX control, specifically in XUpload.ocx version 3.0.0.4 and earlier, affecting Persits XUpload 3.0. This flaw allows remote attackers to execute arbitrary code by providing an overly long argument to the AddFile method. With a CVSS score of 6.8, it is considered a medium-severity vulnerability, requiring medium attack complexity but potentially leading to partial confidentiality, integrity, and availability compromise. While not listed on CISA's KEV catalog, exploit code is publicly available through Metasploit and ExploitDB, indicating a high potential for exploitation, though there is no evidence of active exploitation or significant community discussion.