Unrated severityNVD Advisory· Published Oct 28, 2008· Updated Jun 16, 2026
CVE-2008-4771
CVE-2008-4771
Description
Stack-based buffer overflow in VATDecoder.VatCtrl.1 ActiveX control in (1) 4xem VatCtrl Class (VATDecoder.dll 1.0.0.27 and 1.0.0.51), (2) D-Link MPEG4 SHM Audio Control (VAPGDecoder.dll 1.7.0.5), (3) Vivotek RTSP MPEG4 SP Control (RtspVapgDecoderNew.dll 2.0.0.39), and possibly other products, allows remote attackers to execute arbitrary code via a long Url property. NOTE: some of these details are obtained from third party information.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4cpe:2.3:a:d-link:mpeg4_shm_audio_control:1.7.0.5:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:d-link:mpeg4_shm_audio_control:1.7.0.5:*:*:*:*:*:*:*
- (no CPE)range: 1.7.0.5
cpe:2.3:a:vivotek:rtsp_mpeg4_sp_control:2.0.0.39:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:vivotek:rtsp_mpeg4_sp_control:2.0.0.39:*:*:*:*:*:*:*
- (no CPE)range: 2.0.0.39
Patches
Vulnerability mechanics
References
14- www.securityfocus.com/bid/28010nvdExploit
- secunia.com/advisories/29131nvdVendor Advisory
- secunia.com/advisories/29145nvdVendor Advisory
- secunia.com/advisories/29146nvdVendor Advisory
- osvdb.org/42378nvd
- osvdb.org/43007nvd
- securityreason.com/securityalert/4517nvd
- www.vupen.com/english/advisories/2008/0685/referencesnvd
- www.vupen.com/english/advisories/2008/0686/referencesnvd
- www.vupen.com/english/advisories/2008/0687/referencesnvd
- exchange.xforce.ibmcloud.com/vulnerabilities/40863nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/40864nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/40867nvd
- www.exploit-db.com/exploits/5193nvd
News mentions
0No linked articles in our index yet.