CVE:CVE-2006-6361
CNNVD:CNNVD-200612-152
Upload Progress Meter是用于在PHP环境中显示文件上传进度条的工具。
Bitflux Upload Progress Meter 8276之前版本的uploadprogress.c中的uploadprogress_php_rfc1867_file函数中存在基于堆的缓冲区溢出漏洞。远程攻击者可借助特制的HTTP POST fileupload请求导致拒绝服务（崩溃）或执行任意代码。
solution:Upgrade bitflux upload_progress_meter to a higher version than 8215,8275,and avoid the version 8215,8275