CVE:CVE-2008-4771
CNNVD:CNNVD-200810-480
(1)4xem VatCtrl Class(VATDecoder.dll 1.0.0.27 and 1.0.0.51),(2)D-Link MPEG4 SHM Audio Control(VAPGDecoder.dll 1.7.0.5),(3)Vivotek RTSP MPEG4 SP Control(RtspVapgDecoderNew.dll 2.0.0.39)以及可能其他产品中的VATDecoder.VatCtrl.1 ActiveX控件存在栈缓冲区溢出漏洞，允许远程攻击者借助一个长的URL属性执行任意代码。
solution:Upgrade 4xem vatctrl_class to a higher version than 1.0.0.27,1.0.0.51,and avoid the version 1.0.0.27,1.0.0.51; Upgrade d-link mpeg4_shm_audio_control to a higher version than 1.7.0.5,and avoid the version 1.7.0.5; Upgrade vivotek rtsp_mpeg4_sp_control to a higher version than 2.0.0.39,and avoid the version 2.0.0.39