EUVD-2009-1093

Malware in sbrugna...

Design/Logic Flaw

Use-after-free vulnerability in the LIVEAUDIO.LiveAudioCtrl.1 ActiveX control in LIVEAU1.OCX 7.0 for GeoVision DVR systems allows remote attackers to execute arbitrary code by calling the GetAudioPlayingTime method with certain arguments...

CVE-2009-1092

Use-after-free vulnerability in the LIVEAUDIO.LiveAudioCtrl.1 ActiveX control in LIVEAU1.OCX 7.0 for GeoVision DVR systems allows remote attackers to execute arbitrary code by calling the GetAudioPlayingTime method with certain arguments...

CVE-2009-1092

Use-after-free vulnerability in the LIVEAUDIO.LiveAudioCtrl.1 ActiveX control in LIVEAU1.OCX 7.0 for GeoVision DVR systems allows remote attackers to execute arbitrary code by calling the GetAudioPlayingTime method with certain arguments...

GeoVision LiveAudio ActiveX控件GetAudioPlayingTime()方式代码执行漏洞

BUGTRAQ ID: 34115 GeoVision LiveAudio ActiveX控件是GeoVision监控软件中用于同步音频的工具。 GeoVision LiveAudio ActiveX控件（CLSID：814A3C52-B6F7-4AEA-A9BC-7849B9B0ECA8，Progid：LIVEAUDIO.LiveAudioCtrl.1）没有正确地验证对GetAudioPlayingTime方式所提供的输入参数。如果用户受骗访问了恶意网页的话，就可能导致访问已经释放的内存。成功利用这个漏洞的攻击者可以在用户系统上执行任意代码。 GeoVision LiveAudio...