PT-2009-6574 · Softcab · Sndconverter.Ocx+1

The G0Bl!N · Published 2009-12-29 · Updated 2017-08-17 · CVE-2009-4453

Positive Technologies (AI Summary)

CVSS v2.0

8.8

High

Base vector

AV:N/AC:M/Au:N/C:N/I:C/A:C

Name of the Vulnerable Software and Affected Versions SoftCab Sound Converter version 1.2

Description The issue allows remote attackers to create or overwrite arbitrary files. This is achieved via the SaveFormat method in the sndConverter.ocx ActiveX control.

Recommendations For version 1.2, consider disabling the SaveFormat method in the sndConverter.ocx ActiveX control as a temporary workaround until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2009-4453

Affected Products

Softcab Sound Converter

Sndconverter.Ocx

References · 6

• 🔥 https://exploit-db.com/exploits/10649 · Exploit
• 🔥 http://exploit-db.com/exploits/10649 · Exploit
• http://secunia.com/advisories/37967 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-4453 · Security Note
• http://osvdb.org/61351 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/55082 · Note