Description
The (1) ltmmCaptureCtrl Class, (2) ltmmConvertCtrl Class, and (3) ltmmPlayCtrl Class ActiveX controls (ltmm15.dll 15.1.0.17 and earlier) in LEADTOOLS Multimedia Toolkit 15 allow attackers to overwrite arbitrary files via the SaveSettingsToFile method.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://secunia.com/advisories/29538 ↗
- http://www.shinnai.altervista.org/index.php?mod=02_Forum&group=Security&argument=Remote_performed_exploits&topic=1206434746.ff.php&page=last ↗
- http://www.shinnai.altervista.org/xplits/TXT_lyyELAFI8pOPu2p7N6cq.html ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41467 ↗
- http://www.securityfocus.com/bid/28442 ↗