HIGH · 8.8

CVE-2009-4453

Insecure method vulnerability in SoftCab Sound Converter ActiveX control (sndConverter.ocx) 1.2 allows remote attackers to create or overwrite arbitrary files via the SaveFormat method. NOTE: some of...

Vulnerability Description

Insecure method vulnerability in SoftCab Sound Converter ActiveX control (sndConverter.ocx) 1.2 allows remote attackers to create or overwrite arbitrary files via the SaveFormat method. NOTE: some of these details are obtained from third party information.

CVSS Score

8.8

HIGH

AV:N/AC:M/Au:N/C:N/I:C/A:C
Confidentiality
NONE
Integrity
COMPLETE
Availability
COMPLETE

Affected Products

VendorProductVersions
SoftcabSound Converter Activex1.2

References

FAQ

What is CVE-2009-4453?

CVE-2009-4453 is a vulnerability with a CVSS score of 8.8 (HIGH). Insecure method vulnerability in SoftCab Sound Converter ActiveX control (sndConverter.ocx) 1.2 allows remote attackers to create or overwrite arbitrary files via the SaveFormat method. NOTE: some of...

How severe is CVE-2009-4453?

CVE-2009-4453 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2009-4453?

Check the references section above for vendor advisories and patch information. Affected products include: Softcab Sound Converter Activex.