NVD

Id
4585  
Name
CVE-2008-4771  
Description
Stack-based buffer overflow in VATDecoder.VatCtrl.1 ActiveX control in (1) 4xem VatCtrl Class (VATDecoder.dll 1.0.0.27 and 1.0.0.51), (2) D-Link MPEG4 SHM Audio Control (VAPGDecoder.dll 1.7.0.5), (3) Vivotek RTSP MPEG4 SP Control (RtspVapgDecoderNew.dll 2.0.0.39), and possibly other products, allows remote attackers to execute arbitrary code via a long Url property. NOTE: some of these details are obtained from third party information.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-10-28  
Modified Date
2011-03-07  
Seq
2008-4771  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
28749 4585 CVE-2008-4771 4517  View
28750 4585 CVE-2008-4771 5193  View
28751 4585 CVE-2008-4771 28010  View
28752 4585 CVE-2008-4771 ADV-2008-0685  View
28753 4585 CVE-2008-4771 ADV-2008-0686  View
28754 4585 CVE-2008-4771 ADV-2008-0687  View
28755 4585 CVE-2008-4771 dlink-vapgdecoder-activex-bo(40863)  View
28756 4585 CVE-2008-4771 4xem-vatdecoder-activex-bo(40864)  View
28757 4585 CVE-2008-4771 vivotek-rtspvapgdecodernew-activex-bo(40867)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
48271 JVNDB-2008-003581 4xem VatCtrl Class などの VATDecoder.VatCtrl.1 ActiveX コントロールにおけるスタックベースのバッファオーバーフローの脆弱性 (1) 4xem VatCtrl Class (VATDecoder.dll)、(2) D-Link MPEG4 SHM Audio Control (VAPGDecoder.dll)、および (3) Vivotek RTSP MPEG4 SP Control (RtspVapgDecoderNew.dll) などの VATDecoder.VatCtrl.1 ActiveX コントロールには、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2008-4771 34884 CVE-2008-4771 4585 9.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-003581.html 2008-10-28 2012-06-26 View