CVE Feed

    Dashboard / CVE / CVE-2008-4771

    CVE-2008-4771

    Stack-based buffer overflow in VATDecoder.VatCtrl.1 ActiveX control in (1) 4xem VatCtrl Class (VATDecoder.dll 1.0.0.27 and 1.0.0.51), (2) D-Link MPEG4 SHM Audio Control (VAPGDecoder.dll 1.7.0.5), (3) Vivotek RTSP MPEG4 SP Control (RtspVapgDecoderNew.dll 2.0.0.39), and possibly other products, allows remote attackers to execute arbitrary code via a long Url property. NOTE: some of these details are obtained from third party information.

    Published:Oct 28, 2008
    Last Modified:Apr 23, 2026
    EPS:Oct 28, 2008
    EPSS Score:0.16084
    CVSS Score:9.3

    Affected Products

    Vendor
    4xem
    Product
    Vatctrl Class
    Vendor
    D-link
    Product
    Mpeg4 Shm Audio Control
    Vendor
    Vivotek
    Product
    Rtsp Mpeg4 Sp Control

    Exploits

    http://www.securityfocus.com/bid/28010http://www.securityfocus.com/bid/28010https://www.exploit-db.com/exploits/5193

    References

    http://osvdb.org/42378
    http://osvdb.org/43007
    http://secunia.com/advisories/29131
    http://secunia.com/advisories/29145
    http://secunia.com/advisories/29146
    http://securityreason.com/securityalert/4517
    http://www.securityfocus.com/bid/28010
    http://www.vupen.com/english/advisories/2008/0685/references
    http://www.vupen.com/english/advisories/2008/0686/references
    http://www.vupen.com/english/advisories/2008/0687/references
    https://exchange.xforce.ibmcloud.com/vulnerabilities/40863
    https://exchange.xforce.ibmcloud.com/vulnerabilities/40864
    https://exchange.xforce.ibmcloud.com/vulnerabilities/40867
    https://www.exploit-db.com/exploits/5193
    http://osvdb.org/42378
    http://osvdb.org/43007
    http://secunia.com/advisories/29131
    http://secunia.com/advisories/29145
    http://secunia.com/advisories/29146
    http://securityreason.com/securityalert/4517
    http://www.securityfocus.com/bid/28010
    http://www.vupen.com/english/advisories/2008/0685/references
    http://www.vupen.com/english/advisories/2008/0686/references
    http://www.vupen.com/english/advisories/2008/0687/references
    https://exchange.xforce.ibmcloud.com/vulnerabilities/40863
    https://exchange.xforce.ibmcloud.com/vulnerabilities/40864
    https://exchange.xforce.ibmcloud.com/vulnerabilities/40867
    https://www.exploit-db.com/exploits/5193

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High