PT-2007-4077 · Lead Technologies+1 · Ltmm15.Dll+1

Shinnai · Published 2007-05-18 · Updated 2017-07-29 · CVE-2007-2763

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Sienzo Digital Music Mentor version 2.6.0.4

Description The issue is related to a buffer overflow in the UnlockSupport function within the LockModules subsystem of a certain ActiveX control in ltmm15.dll. This allows remote attackers to execute arbitrary code via a long string in the second argument.

Recommendations For Sienzo Digital Music Mentor version 2.6.0.4, consider disabling the UnlockSupport function in the LockModules subsystem as a temporary workaround until a patch is available. Restrict access to the ltmm15.dll module to minimize the risk of exploitation. Avoid using long strings in the second argument of the UnlockSupport function until the issue is resolved.

Exploit

Fix

Related Identifiers

CVE-2007-2763

Affected Products

Sienzo Digital Music Mentor

Ltmm15.Dll

References · 8

• 🔥 https://exploit-db.com/exploits/30049 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-2763 · Security Note
• http://shinnai.altervista.org/viewtopic.php?id=42&t_id=19 · Note
• http://osvdb.org/36025 · Note
• http://moaxb.blogspot.com/2007/05/moaxb-17-sienzo-digital-music-mentor.html · Note
• http://securityfocus.com/bid/24035 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34353 · Note
• http://shinnai.altervista.org/moaxb/20070517/sienzo2txt.html · Note