CVE-2009-1092 – GeoVision LiveAudio - ActiveX Remote Freed-Memory Access

https://notcve.org/view.php?id=CVE-2009-1092

Use-after-free vulnerability in the LIVEAUDIO.LiveAudioCtrl.1 ActiveX control in LIVEAU~1.OCX 7.0 for GeoVision DVR systems allows remote attackers to execute arbitrary code by calling the GetAudioPlayingTime method with certain arguments. Una vulnerabilidad de uso de memoria previamente liberada en el control ActiveX de LIVEAUDIO.LiveAudioCtrl.1 en LIVEAU~1.OCX versión 7.0 para sistemas DVR de GeoVision, permite a los atacantes remotos ejecutar código arbitrario mediante el llamado al método GetAudioPlayingTime con ciertos argumentos. • https://www.exploit-db.com/exploits/8206 http://retrogod.altervista.org/9sg_geovision_liveaudio_freedmem.html http://www.securityfocus.com/archive/1/501773/100/0/threaded http://www.securityfocus.com/bid/34115 https://exchange.xforce.ibmcloud.com/vulnerabilities/49238 • CWE-399: Resource Management Errors •