PT-2007-4077 · Lead Technologies+1 · Ltmm15.Dll+1

Shinnai · Publicado 2007-05-18 · Atualizado 2017-07-29 · CVE-2007-2763

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Sienzo Digital Music Mentor version 2.6.0.4

Description The issue is related to a buffer overflow in the UnlockSupport function within the LockModules subsystem of a certain ActiveX control in ltmm15.dll. This allows remote attackers to execute arbitrary code via a long string in the second argument.

Recommendations For Sienzo Digital Music Mentor version 2.6.0.4, consider disabling the UnlockSupport function in the LockModules subsystem as a temporary workaround until a patch is available. Restrict access to the ltmm15.dll module to minimize the risk of exploitation. Avoid using long strings in the second argument of the UnlockSupport function until the issue is resolved.

Exploit

Correção

Identificadores relacionados

CVE-2007-2763

Produtos afetados

Sienzo Digital Music Mentor

Ltmm15.Dll

Referências · 8

• 🔥 https://exploit-db.com/exploits/30049 · Exploit
• http://shinnai.altervista.org/viewtopic.php?id=42&t_id=19 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-2763 · Nota de Segurança
• http://osvdb.org/36025 · Nota
• http://moaxb.blogspot.com/2007/05/moaxb-17-sienzo-digital-music-mentor.html · Nota
• http://securityfocus.com/bid/24035 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34353 · Nota
• http://shinnai.altervista.org/moaxb/20070517/sienzo2txt.html · Nota