PT-2009-6574 · Softcab · Sndconverter.Ocx+1

The G0Bl!N · Publicado 2009-12-29 · Atualizado 2017-08-17 · CVE-2009-4453

Positive Technologies (AI Summary)

CVSS v2.0

8.8

Alta

Vetor base

AV:N/AC:M/Au:N/C:N/I:C/A:C

Name of the Vulnerable Software and Affected Versions SoftCab Sound Converter version 1.2

Description The issue allows remote attackers to create or overwrite arbitrary files. This is achieved via the SaveFormat method in the sndConverter.ocx ActiveX control.

Recommendations For version 1.2, consider disabling the SaveFormat method in the sndConverter.ocx ActiveX control as a temporary workaround until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2009-4453

Produtos afetados

Softcab Sound Converter

Sndconverter.Ocx

Referências · 6

• 🔥 https://exploit-db.com/exploits/10649 · Exploit
• 🔥 http://exploit-db.com/exploits/10649 · Exploit
• http://secunia.com/advisories/37967 · Aviso do Fabricante
• http://osvdb.org/61351 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/55082 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-4453 · Nota de Segurança