{"api_version":"1","generated_at":"2026-07-23T10:39:34+00:00","cve":"CVE-2008-0959","urls":{"html":"https://cve.report/CVE-2008-0959","api":"https://cve.report/api/cve/CVE-2008-0959.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2008-0959","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2008-0959"},"summary":{"title":"CVE-2008-0959","description":"Multiple stack-based buffer overflows in the Online Media Technologies NCTSoft NCTAudioInformation2 ActiveX control in NCTAudioInformation2.dll, as used in (1) Power Audio CD Grabber 1.0, (2) Power Audio CD Burner 1.02, (3) CinematicMP3 1.4.0.0, (4) Alive MP3 WAV Converter 3.9.3.2, and possibly other products, allow remote attackers to execute arbitrary code via unspecified vectors.","state":"PUBLISHED","assigner":"certcc","published_at":"2008-05-29 16:32:00","updated_at":"2026-04-23 00:35:47"},"problem_types":["CWE-119","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"6.8","severity":"","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://www.kb.cert.org/vuls/id/669265","name":"http://www.kb.cert.org/vuls/id/669265","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"],"title":"VU#669265 - Online Media Technologies NCTSoft NCTAudioInformation2 ActiveX stack buffer overflows","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/30445","name":"http://secunia.com/advisories/30445","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Alive MP3 WAV Converter NCTAudioInformation2.dll ActiveX Control Buffer Overflow - Secunia Advisories - Vulnerability Intelligence - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/30458","name":"http://secunia.com/advisories/30458","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Audio Editor Plus NCTAudioInformation2.dll ActiveX Control Buffer Overflow - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/30457","name":"http://secunia.com/advisories/30457","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Powerful Audio Tool NCTAudioInformation2.dll ActiveX Control Buffer Overflow - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/30421","name":"http://secunia.com/advisories/30421","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Power Audio CD Burner NCTAudioInformation2 ActiveX Control Buffer Overflow - Secunia Advisories - Vulnerability Intelligence - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2008/1669","name":"http://www.vupen.com/english/advisories/2008/1669","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/30418","name":"http://secunia.com/advisories/30418","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"4U WMA MP3 Converter NCTAudioInformation2.dll ActiveX Control Buffer Overflow - Advisories - Community","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/30453","name":"http://secunia.com/advisories/30453","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Total Audio Recorder and Editor NCTSoft ActiveX Controls Buffer Overflow Vulnerabilities - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/30454","name":"http://secunia.com/advisories/30454","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Easy Audio Redactor NCTSoft ActiveX Controls Buffer Overflow Vulnerabilities - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/30456","name":"http://secunia.com/advisories/30456","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Crystal MP3 Recorder NCTAudioInformation2.dll ActiveX Control Buffer Overflow - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/30395","name":"http://secunia.com/advisories/30395","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"CinematicMP3 NCTAudioInformation2 ActiveX Control Buffer Overflow - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42680","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42680","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/30452","name":"http://secunia.com/advisories/30452","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"My Phone Files Media Studio NCTSoft ActiveX Controls Buffer Overflow Vulnerabilities - Secunia Advisories - Vulnerability Intelligence - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/30419","name":"http://secunia.com/advisories/30419","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Power Audio CD Grabber NCTAudioInformation2 ActiveX Control Buffer Overflow - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/30451","name":"http://secunia.com/advisories/30451","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Total Audio Capture NCTAudioInformation2.dll ActiveX Control Buffer Overflow - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/30415","name":"http://secunia.com/advisories/30415","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"NCTSoft Products NCTAudioInformation2 ActiveX Control Buffer Overflows - Secunia Advisories - Vulnerability Intelligence - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-0959","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-0959","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2008","cve_id":"959","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"alivemedia","cpe5":"alive_mp3_wav_converter","cpe6":"3.9.3.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"959","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"online_media_technologies","cpe5":"nctaudioeditor_activex_control","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"959","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"online_media_technologies","cpe5":"nctaudiostudio_activex_control","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"959","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"orion_studios","cpe5":"cinematicmp3","cpe6":"1.4.0.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"959","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ussun","cpe5":"power_audio_cd_burner","cpe6":"1.02","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"959","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ussun","cpe5":"power_audio_cd_grabber","cpe6":"1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T08:01:40.135Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"30395","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/30395"},{"name":"30419","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/30419"},{"name":"nctaudiostudio-nctaudioinformation2-bo(42680)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42680"},{"name":"VU#669265","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred"],"url":"http://www.kb.cert.org/vuls/id/669265"},{"name":"30451","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/30451"},{"name":"ADV-2008-1669","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2008/1669"},{"name":"30418","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/30418"},{"name":"30454","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/30454"},{"name":"30445","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/30445"},{"name":"30421","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/30421"},{"name":"30457","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/30457"},{"name":"30453","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/30453"},{"name":"30415","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/30415"},{"name":"30458","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/30458"},{"name":"30452","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/30452"},{"name":"30456","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/30456"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2008-05-27T00:00:00.000Z","descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in the Online Media Technologies NCTSoft NCTAudioInformation2 ActiveX control in NCTAudioInformation2.dll, as used in (1) Power Audio CD Grabber 1.0, (2) Power Audio CD Burner 1.02, (3) CinematicMP3 1.4.0.0, (4) Alive MP3 WAV Converter 3.9.3.2, and possibly other products, allow remote attackers to execute arbitrary code via unspecified vectors."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-08-07T12:57:01.000Z","orgId":"37e5125f-f79b-445b-8fad-9564f167944b","shortName":"certcc"},"references":[{"name":"30395","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/30395"},{"name":"30419","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/30419"},{"name":"nctaudiostudio-nctaudioinformation2-bo(42680)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42680"},{"name":"VU#669265","tags":["third-party-advisory","x_refsource_CERT-VN"],"url":"http://www.kb.cert.org/vuls/id/669265"},{"name":"30451","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/30451"},{"name":"ADV-2008-1669","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2008/1669"},{"name":"30418","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/30418"},{"name":"30454","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/30454"},{"name":"30445","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/30445"},{"name":"30421","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/30421"},{"name":"30457","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/30457"},{"name":"30453","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/30453"},{"name":"30415","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/30415"},{"name":"30458","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/30458"},{"name":"30452","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/30452"},{"name":"30456","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/30456"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cert@cert.org","ID":"CVE-2008-0959","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple stack-based buffer overflows in the Online Media Technologies NCTSoft NCTAudioInformation2 ActiveX control in NCTAudioInformation2.dll, as used in (1) Power Audio CD Grabber 1.0, (2) Power Audio CD Burner 1.02, (3) CinematicMP3 1.4.0.0, (4) Alive MP3 WAV Converter 3.9.3.2, and possibly other products, allow remote attackers to execute arbitrary code via unspecified vectors."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"30395","refsource":"SECUNIA","url":"http://secunia.com/advisories/30395"},{"name":"30419","refsource":"SECUNIA","url":"http://secunia.com/advisories/30419"},{"name":"nctaudiostudio-nctaudioinformation2-bo(42680)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42680"},{"name":"VU#669265","refsource":"CERT-VN","url":"http://www.kb.cert.org/vuls/id/669265"},{"name":"30451","refsource":"SECUNIA","url":"http://secunia.com/advisories/30451"},{"name":"ADV-2008-1669","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2008/1669"},{"name":"30418","refsource":"SECUNIA","url":"http://secunia.com/advisories/30418"},{"name":"30454","refsource":"SECUNIA","url":"http://secunia.com/advisories/30454"},{"name":"30445","refsource":"SECUNIA","url":"http://secunia.com/advisories/30445"},{"name":"30421","refsource":"SECUNIA","url":"http://secunia.com/advisories/30421"},{"name":"30457","refsource":"SECUNIA","url":"http://secunia.com/advisories/30457"},{"name":"30453","refsource":"SECUNIA","url":"http://secunia.com/advisories/30453"},{"name":"30415","refsource":"SECUNIA","url":"http://secunia.com/advisories/30415"},{"name":"30458","refsource":"SECUNIA","url":"http://secunia.com/advisories/30458"},{"name":"30452","refsource":"SECUNIA","url":"http://secunia.com/advisories/30452"},{"name":"30456","refsource":"SECUNIA","url":"http://secunia.com/advisories/30456"}]}}}},"cveMetadata":{"assignerOrgId":"37e5125f-f79b-445b-8fad-9564f167944b","assignerShortName":"certcc","cveId":"CVE-2008-0959","datePublished":"2008-05-29T16:00:00.000Z","dateReserved":"2008-02-25T00:00:00.000Z","dateUpdated":"2024-08-07T08:01:40.135Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2008-05-29 16:32:00","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["CWE-119","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alivemedia:alive_mp3_wav_converter:3.9.3.2:*:*:*:*:*:*:*","matchCriteriaId":"25BC6A2A-67DE-4918-B6ED-E1B636559D20"},{"vulnerable":true,"criteria":"cpe:2.3:a:online_media_technologies:nctaudioeditor_activex_control:*:*:*:*:*:*:*:*","matchCriteriaId":"09278FE6-820B-4D31-9665-DB539BB23BBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:online_media_technologies:nctaudiostudio_activex_control:*:*:*:*:*:*:*:*","matchCriteriaId":"9F7078A0-94D6-42F4-B413-AFA7C966AA87"},{"vulnerable":true,"criteria":"cpe:2.3:a:orion_studios:cinematicmp3:1.4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"0D92263D-7282-427F-8C93-EAF55990493D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ussun:power_audio_cd_burner:1.02:*:*:*:*:*:*:*","matchCriteriaId":"E5442CA4-4185-414D-BADF-659FDC157B2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ussun:power_audio_cd_grabber:1.0:*:*:*:*:*:*:*","matchCriteriaId":"DDDACACA-B499-435F-AB3A-97545B082A98"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2008","CveId":"959","Ordinal":"1","Title":"CVE-2008-0959","CVE":"CVE-2008-0959","Year":"2008"},"notes":[{"CveYear":"2008","CveId":"959","Ordinal":"1","NoteData":"Multiple stack-based buffer overflows in the Online Media Technologies NCTSoft NCTAudioInformation2 ActiveX control in NCTAudioInformation2.dll, as used in (1) Power Audio CD Grabber 1.0, (2) Power Audio CD Burner 1.02, (3) CinematicMP3 1.4.0.0, (4) Alive MP3 WAV Converter 3.9.3.2, and possibly other products, allow remote attackers to execute arbitrary code via unspecified vectors.","Type":"Description","Title":"CVE-2008-0959"},{"CveYear":"2008","CveId":"959","Ordinal":"2","NoteData":"2008-05-29","Type":"Other","Title":"Published"},{"CveYear":"2008","CveId":"959","Ordinal":"3","NoteData":"2017-08-07","Type":"Other","Title":"Modified"}]}}}