Multiple stack-based buffer overflows in the Lateral Arts Photobox uploader ActiveX control 1.x before 1.3 and 2.2.0.6 allow remote attackers to execute arbitrary code via a long URL string for the (1) LogURL (2) ConnectURL (3) SkinURL (4) AlbumCreateURL (5) ErrorURL or (6) httpsinglehost property value.