CVE-2008-4771: Buffer Overflow
First published: Tue Oct 28 2008(Updated: )
Stack-based buffer overflow in VATDecoder.VatCtrl.1 ActiveX control in (1) 4xem VatCtrl Class (VATDecoder.dll 1.0.0.27 and 1.0.0.51), (2) D-Link MPEG4 SHM Audio Control (VAPGDecoder.dll 1.7.0.5), (3) Vivotek RTSP MPEG4 SP Control (RtspVapgDecoderNew.dll 2.0.0.39), and possibly other products, allows remote attackers to execute arbitrary code via a long Url property. NOTE: some of these details are obtained from third party information.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| 4xem Vatctrl Class | =1.0.0.51 | |
| D-link Mpeg4 Shm Audio Control | =1.7.0.5 | |
| 4xem Vatctrl Class | =1.0.0.27 | |
| Vivotek Rtsp Mpeg4 Sp Control | =2.0.0.39 | |
| 4xem VatCtrl Class | =1.0.0.27 | |
| 4xem VatCtrl Class | =1.0.0.51 | |
| D-Link MPEG4 SHM Audio Control | =1.7.0.5 | |
| Vivotek RTSP MPEG4 SP Control | =2.0.0.39 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://secunia.com/advisories/29146
- http://www.securityfocus.com/bid/28010
- http://secunia.com/advisories/29145
- http://secunia.com/advisories/29131
- http://securityreason.com/securityalert/4517
- http://osvdb.org/43007
- http://osvdb.org/42378
- http://www.vupen.com/english/advisories/2008/0687/references
- http://www.vupen.com/english/advisories/2008/0686/references
- http://www.vupen.com/english/advisories/2008/0685/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/40867
- https://exchange.xforce.ibmcloud.com/vulnerabilities/40864
- https://exchange.xforce.ibmcloud.com/vulnerabilities/40863
- https://www.exploit-db.com/exploits/5193
- collector/nvd-historical
- collector/nvd-index
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/last-modified-date
- agent/severity
- agent/author
- agent/tags
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- vendor/4xem
- canonical/4xem vatctrl class
- version/4xem vatctrl class/1.0.0.51
- vendor/d-link
- canonical/d-link mpeg4 shm audio control
- version/d-link mpeg4 shm audio control/1.7.0.5
- version/4xem vatctrl class/1.0.0.27
- vendor/vivotek
- canonical/vivotek rtsp mpeg4 sp control
- version/vivotek rtsp mpeg4 sp control/2.0.0.39