CVE:CVE-2008-0959
CNNVD:CNNVD-200805-367
NCTAudioInformation是Online Media Technologies(之前名为NCT公司)推出的用于更改声音文件中信息的ActiveX 控件，支持WAV、MP3、WMA等格式的文件。
NCTAudioInformation2控件(NCTAudioInformation2.dll)没有正确地处理GetAudioInformation()和SetAudioInformation()属性的参数，如果用户受骗访问了恶意网页并向这些参数传送了超长参数的话，就可以触发栈缓冲区溢出，导致执行任意指令。
solution:Upgrade alivemedia alive_mp3_wav_converter to a higher version than 3.9.3.2,and avoid the version 3.9.3.2; Upgrade online_media_technologies nctaudioeditor_activex_control to a higher version than *; Upgrade online_media_technologies nctaudiostudio_activex_control to a higher version than *; Upgrade orion_studios cinematicmp3 to a higher version than 1.4.0.0,and avoid the version 1.4.0.0; Upgrade ussun power_audio_cd_burner to a higher version than 1.02,and avoid the version 1.02; Upgrade ussun power_audio_cd_grabber to a higher version than 1.0,and avoid the version 1.0