CVE-2008-0958

Published: May 29, 2008Modified: Apr 23, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Multiple stack-based buffer overflows in the Online Media Technologies NCTSoft NCTAudioGrabber2 ActiveX control in NCTAudioGrabber2.dll allow remote attackers to execute arbitrary code via unspecified vectors.

Affected (1)

Products: Nctsoft: Nctaudioeditor Activex Control

Nctsoft

1 product

Nctaudioeditor Activex Control

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Nctsoft Nctaudioeditor Activex Control	All versions

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (18)

http://secunia.com/advisories/30414

Source: cret@cert.org

Vendor Advisory

http://secunia.com/advisories/30451

Source: cret@cert.org

http://secunia.com/advisories/30452

Source: cret@cert.org

http://secunia.com/advisories/30453

Source: cret@cert.org

http://secunia.com/advisories/30454

Source: cret@cert.org

http://secunia.com/advisories/30458

Source: cret@cert.org

http://www.kb.cert.org/vuls/id/656593

Source: cret@cert.org

US Government Resource

http://www.vupen.com/english/advisories/2008/1669

Source: cret@cert.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/42678

Source: cret@cert.org

http://secunia.com/advisories/30414