medium6.8

CVE-2008-0959

Multiple stack-based buffer overflows in the Online Media Technologies NCTSoft NCTAudioInformation2 ActiveX control in NCTAudioInformation2.dll, as used in (1)…

Impact

Multiple stack-based buffer overflows in the Online Media Technologies NCTSoft NCTAudioInformation2 ActiveX control in NCTAudioInformation2.dll, as used in (1) Power Audio CD Grabber 1.0, (2) Power Audio CD Burner 1.02, (3) CinematicMP3 1.4.0.0, (4) Alive MP3 WAV Converter 3.9.3.2, and possibly other products, allow remote attackers to execute arbitrary code via unspecified vectors.

Affected products

Vendor	Product	Affected versions
Alivemedia	Alive Mp3 Wav Converter	Version 3.9.3.2
Online Media Technologies	Nctaudioeditor Activex Control	All versions
Online Media Technologies	Nctaudiostudio Activex Control	All versions
Orion Studios	Cinematicmp3	Version 1.4.0.0
Ussun	Power Audio Cd Burner	Version 1.02
Ussun	Power Audio Cd Grabber	Version 1.0

Weakness classification

CWE-119

References

NVD record
CVE.org record
http://secunia.com/advisories/30395
http://secunia.com/advisories/30415
http://secunia.com/advisories/30418
http://secunia.com/advisories/30419
http://secunia.com/advisories/30421
http://secunia.com/advisories/30445
http://secunia.com/advisories/30451
http://secunia.com/advisories/30452
http://secunia.com/advisories/30453
http://secunia.com/advisories/30454
http://secunia.com/advisories/30456
http://secunia.com/advisories/30457
http://secunia.com/advisories/30458
http://www.kb.cert.org/vuls/id/669265
http://www.vupen.com/english/advisories/2008/1669
https://exchange.xforce.ibmcloud.com/vulnerabilities/42680
http://secunia.com/advisories/30395
http://secunia.com/advisories/30415
http://secunia.com/advisories/30418
http://secunia.com/advisories/30419
http://secunia.com/advisories/30421
http://secunia.com/advisories/30445
http://secunia.com/advisories/30451
http://secunia.com/advisories/30452
http://secunia.com/advisories/30453