CVE

Id
38527  
CVE No.
CVE-2009-1092  
Status
Candidate  
Description
Use-after-free vulnerability in the LIVEAUDIO.LiveAudioCtrl.1 ActiveX control in LIVEAU~1.OCX 7.0 for GeoVision DVR systems allows remote attackers to execute arbitrary code by calling the GetAudioPlayingTime method with certain arguments.  
Phase
Assigned (20090325)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
420500 38527 CVE-2009-1092 BUGTRAQ:20090313 GeoVision LiveAudio ActiveX Control GetAudioPlayingTime() remote freed-memory access exploit  View
420501 38527 CVE-2009-1092 URL:http://www.securityfocus.com/archive/1/archive/1/501773/100/0/threaded  View
420502 38527 CVE-2009-1092 MILW0RM:8206  View
420503 38527 CVE-2009-1092 URL:http://www.milw0rm.com/exploits/8206  View
420504 38527 CVE-2009-1092 MISC:http://retrogod.altervista.org/9sg_geovision_liveaudio_freedmem.html  View
420505 38527 CVE-2009-1092 BID:34115  View
420506 38527 CVE-2009-1092 URL:http://www.securityfocus.com/bid/34115  View
420507 38527 CVE-2009-1092 XF:geovision-liveaudio-activex-dos(49238)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
40159 JVNDB-2009-001165 JDK および JRE の unpack200 におけるバッファオーバフローの脆弱性 Java SE Development Kit (JDK) および Java Runtime Environment (JRE) の unpack200 には、JAR ファイルの処理に不備があることにより、バッファオーバフローの脆弱性が存在します。 CVE-2009-1096 38527 10 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001165.html  View