VULNERABILITY INTELLIGENCE

CVE-2008-1605

CVSS score6.8 MEDIUM
EPSS probability1.90%
CISA KEVNot currently listed
Published2008-04-01
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:P

Description

The (1) ltmmCaptureCtrl Class, (2) ltmmConvertCtrl Class, and (3) ltmmPlayCtrl Class ActiveX controls (ltmm15.dll 15.1.0.17 and earlier) in LEADTOOLS Multimedia Toolkit 15 allow attackers to overwrite arbitrary files via the SaveSettingsToFile method.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references