PT-2007-3922 · Unknown · Audiocdripperocx.Ocx

Publicado 2007-05-11 · Atualizado 2018-10-16 · CVE-2007-2603

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions AudioCDRipperOCX.ocx version 1.0

Description The issue is related to an unspecified vulnerability in the Init function of the Audio CD Ripper OCX ActiveX control. This vulnerability allows remote attackers to cause a denial of service, resulting in a NULL dereference and crash of Internet Explorer, via unspecified vectors.

Recommendations For AudioCDRipperOCX.ocx version 1.0, consider disabling the Init function in the AudioCDRipperOCX.ocx ActiveX control as a temporary workaround to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2007-2603

Produtos afetados

Audiocdripperocx.Ocx

Referências · 6

• http://osvdb.org/36216 · Nota
• http://securityfocus.com/bid/23900 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34206 · Nota
• http://securityreason.com/securityalert/2708 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-2603 · Nota de Segurança
• http://securityfocus.com/archive/1/468070/100/0/threaded · Nota