CVE-2008-0959 Multiple stack-based buffer overflows in the Online Media Technologies NCTSoft NCTAudioInformation2 ActiveX control in NCTAudioInformation2.dll, as used in (1) Power Audio CD Grabber 1.0, (2) Power Au...
MediumCVSS 6.8
EPSS 6.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple stack-based buffer overflows in the Online Media Technologies NCTSoft NCTAudioInformation2 ActiveX control in NCTAudioInformation2.dll, as used in (1) Power Audio CD Grabber 1.0, (2) Power Audio CD Burner 1.02, (3) CinematicMP3 1.4.0.0, (4) Alive MP3 WAV Converter 3.9.3.2, and possibly other products, allow remote attackers to execute arbitrary code via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| alivemedia alive mp3 wav converter | = 3.9.3.2 | No fix listed |
| online media technologies nctaudioeditor activex control | All versions | No fix listed |
| online media technologies nctaudiostudio activex control | All versions | No fix listed |
| orion studios cinematicmp3 | = 1.4.0.0 | No fix listed |
| ussun power audio cd burner | = 1.02 | No fix listed |
| ussun power audio cd grabber | = 1.0 | No fix listed |
References
- 30395 third-party-advisory
- 30415 third-party-advisory vendor-advisory
- 30418 third-party-advisory
- 30419 third-party-advisory
- 30421 third-party-advisory
- 30445 third-party-advisory
- 30451 third-party-advisory
- 30452 third-party-advisory
- 30453 third-party-advisory
- 30454 third-party-advisory
- 30456 third-party-advisory
- 30457 third-party-advisory
- 30458 third-party-advisory
- VU#669265 third-party-advisory us-government-resource
- ADV-2008-1669 vdb-entry
- nctaudiostudio-nctaudioinformation2-bo(42680) vdb-entry