Unscored severity · published Oct 28, 2008
CVE-2008-4771
Stack-based buffer overflow in VATDecoder.VatCtrl.1 ActiveX control in (1) 4xem VatCtrl Class (VATDecoder.dll 1.0.0.27 and 1.0.0.51), (2) D-Link MPEG4 SHM Audio Control…
–
CVSS
7.1%
EPSS
No
On KEV
Description
Stack-based buffer overflow in VATDecoder.VatCtrl.1 ActiveX control in (1) 4xem VatCtrl Class (VATDecoder.dll 1.0.0.27 and 1.0.0.51), (2) D-Link MPEG4 SHM Audio Control (VAPGDecoder.dll 1.7.0.5), (3) Vivotek RTSP MPEG4 SP Control (RtspVapgDecoderNew.dll 2.0.0.39), and possibly other products, allows remote attackers to execute arbitrary code via a long Url property. NOTE: some of these details are obtained from third party information.
Exploitation
Is it being used?
Exploit prediction (EPSS)7.1% · higher than 94% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MS
Mpeg4 Shm Audio Control · D-link
1.7.0.5 · source: NVD
RM
Rtsp Mpeg4 SP Control · Vivotek
2.0.0.39 · source: NVD
VC
Vatctrl Class · 4xem
1.0.0.27; 1.0.0.51 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-4771
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-4771
osvdb.org
http://osvdb.org/42378
osvdb.org
http://osvdb.org/43007
Vendor Advisory
http://secunia.com/advisories/29131
Vendor Advisory
http://secunia.com/advisories/29145
Vendor Advisory
http://secunia.com/advisories/29146
securityreason.com
http://securityreason.com/securityalert/4517