CVEvulnerability
CVE-2008-1605
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-04-01
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-20
Description
The (1) ltmmCaptureCtrl Class, (2) ltmmConvertCtrl Class, and (3) ltmmPlayCtrl Class ActiveX controls (ltmm15.dll 15.1.0.17 and earlier) in LEADTOOLS Multimedia Toolkit 15 allow attackers to overwrite arbitrary files via the SaveSettingsToFile method.
Affected configurations
• leadtools multimedia toolkit 15
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://secunia.com/advisories/29538 Vendor Advisory
- http://www.securityfocus.com/bid/28442 www.securityfocus.com
- http://www.shinnai.altervista.org/index.php?mod=02_Forum&group=Security&argument=Remote_performed_exploits&topic=1206434746.ff.php&page=last www.shinnai.altervista.org
- http://www.shinnai.altervista.org/xplits/TXT_lyyELAFI8pOPu2p7N6cq.html Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41467 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/29538 Vendor Advisory
- http://www.securityfocus.com/bid/28442 www.securityfocus.com
- http://www.shinnai.altervista.org/index.php?mod=02_Forum&group=Security&argument=Remote_performed_exploits&topic=1206434746.ff.php&page=last www.shinnai.altervista.org
- http://www.shinnai.altervista.org/xplits/TXT_lyyELAFI8pOPu2p7N6cq.html Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41467 exchange.xforce.ibmcloud.com