CVE-2009-4453

HighCVSS 8.8/10Last modified Jun 16, 2026

Description

Insecure method vulnerability in SoftCab Sound Converter ActiveX control (sndConverter.ocx) 1.2 allows remote attackers to create or overwrite arbitrary files via the SaveFormat method. NOTE: some of these details are obtained from third party information.

Metrics

CVSS 2.0 8.8/10AV:N/AC:M/Au:N/C:N/I:C/A:C

Affected software

No affected versions have been published.

Timeline

Published: Dec 29, 2009
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2009

CVE-2009-44543.3vccleaner in VideoCache 1.9.2 allows local users with Squid proxy user privileges to overwrite arbitrary files via a symlink attack on /var/CVE-2009-44556.5The default configuration of Cisco ASA 5500 Series Adaptive Security Appliance (Cisco ASA) 7.0, 7.1, 7.2, 8.0, 8.1, and 8.2 allows portal tr CVE-2009-44567.5SQL injection vulnerability in news_detail.php in Green Desktiny 2.3.1, and possibly earlier versions, allows remote attackers to execute ar CVE-2009-44577.5Multiple unspecified vulnerabilities in the Vsftpd Webmin module before 1.3b for the Vsftpd server have unknown impact and attack vectors re CVE-2009-44584.3Multiple cross-site scripting (XSS) vulnerabilities in FreePBX 2.5.2 and 2.6.0rc2, and possibly other versions, allow remote attackers to in CVE-2009-44594.3Redmine 0.8.7 and earlier uses the title tag before defining the character encoding in a meta tag, which allows remote attackers to conduct CVE-2009-44604.3Multiple cross-site scripting (XSS) vulnerabilities in Auto-Surf Traffic Exchange Script 1.1 allow remote attackers to inject arbitrary web CVE-2009-44614.3Multiple cross-site scripting (XSS) vulnerabilities in FlatPress 0.909 allow remote attackers to inject arbitrary web script or HTML via the CVE-2009-446210.0Stack-based buffer overflow in the NetBiterConfig utility (NetBiterConfig.exe) 1.3.0 for Intellicom NetBiter WebSCADA allows remote attacker CVE-2009-446310.0Intellicom NetBiter WebSCADA devices use default passwords for the HICP network configuration service, which makes it easier for remote atta CVE-2009-44644.3Cross-site scripting (XSS) vulnerability in searchadvance.asp in Active Business Directory 2 allows remote attackers to inject arbitrary web CVE-2009-44657.5DeluxeBB 1.3 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain user