NCTAudioInformation2 ActiveX控件栈溢出漏洞

CVECAN ID: CVE-2008-0959 NCTAudioInformation是Online Media Technologies（之前名为NCT公司）推出的用于更改声音文件中信息的ActiveX 控件，支持WAV、MP3、WMA等格式的文件。 NCTAudioInformation2控件（NCTAudioInformation2.dll）没有正确地处理GetAudioInformation和SetAudioInformation属性的参数，如果用户受骗访问了恶意网页并向这些参数传送了超长参数的话，就可以触发栈溢出，导致执行任意指令。 Online Media...

CVE-2008-0959

Multiple stack-based buffer overflows in the Online Media Technologies NCTSoft NCTAudioInformation2 ActiveX control in NCTAudioInformation2.dll, as used in 1 Power Audio CD Grabber 1.0, 2 Power Audio CD Burner 1.02, 3 CinematicMP3 1.4.0.0, 4 Alive MP3 WAV Converter 3.9.3.2, and possibly other...

Stack overflow

Multiple stack-based buffer overflows in the Online Media Technologies NCTSoft NCTAudioGrabber2 ActiveX control in NCTAudioGrabber2.dll allow remote attackers to execute arbitrary code via unspecified vectors...

Stack overflow

Multiple stack-based buffer overflows in the Online Media Technologies NCTSoft NCTAudioInformation2 ActiveX control in NCTAudioInformation2.dll, as used in 1 Power Audio CD Grabber 1.0, 2 Power Audio CD Burner 1.02, 3 CinematicMP3 1.4.0.0, 4 Alive MP3 WAV Converter 3.9.3.2, and possibly other...

CVE-2008-0959

CVE-2008-0959 affects Online Media Technologies NCTSoft NCTAudioInformation2 ActiveX control (NCTAudioInformation2.dll). The vulnerability consists of multiple stack-based buffer overflows when handling GetAudioInformation() and SetAudioInformation() parameters, enabling remote code execution via...

CVE-2008-0958

The CVE-2008-0958 issue affects Online Media Technologies’ NCTSoft NCTAudioGrabber2 ActiveX control (NCTAudioGrabber2.dll). It describes multiple stack-based buffer overflows when handling certain properties, allowing a remote attacker to execute arbitrary code by convincing a user to view a mali...

Online Media Technologies NCTSoft NCTAudioInformation2 ActiveX stack buffer overflows

Overview The Online Media Technologies NCTSoft NCTAudioInformation2 ActiveX control contains multiple stack buffer overflows, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Online Media Technologies, which was formerly known as NCT...

Buffer overflow

Buffer overflow in a certain ActiveX control in Online Media Technologies AVSMJPEGFILE.DLL 1.1.1.102 allows remote attackers to execute arbitrary code via a long first argument to the CreateStill method...

CVE-2007-6327

Summary (CVE-2007-6327) : A buffer overflow in the ActiveX control AVSMJPEGFILE.DLL version 1.1.1.102 from Online Media Technologies can allow remote code execution when a long first argument is passed to the CreateStill method. The affected component is an ActiveX control used by the application...

Online Media Technologies 'AVSMJPEGFILE.DLL 1.1' - Remote Buffer Overflow (PoC)

------------------------------------------------------------------------------- Online Media Technologies AVSMJPEGFILE.DLL 1.1 Remote Buffer Overflow url: www.avsmedia.com Author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was written for educational purpose...