S-303: Creative Software AutoUpdate Engine ActiveX Vulnerability


 
Thread Tools Search this Thread
Special Forums Cybersecurity Security Advisories (RSS) S-303: Creative Software AutoUpdate Engine ActiveX Vulnerability
# 1  
Old 05-30-2008
S-303: Creative Software AutoUpdate Engine ActiveX Vulnerability

The Creative Labs AutoUpdate Engine ActiveX control contains a stack buffer overflow, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. The risk is MEDIUM. By convincing a user to view a specially crafted HTML document (e.g., a web page or an HTML email message or attachment), an attacker may be able to execute arbitrary code with the privileges of the user.


More...
Login or Register to Ask a Question

Previous Thread | Next Thread
Login or Register to Ask a Question
SND_SBC(4)						   BSD Kernel Interfaces Manual 						SND_SBC(4)

NAME
snd_sbc, snd_sb16, snd_sb8 -- Creative Sound Blaster ISA and compatible bridge device driver SYNOPSIS
To compile this driver into the kernel, place the following lines in your kernel configuration file: device sound device snd_sbc device snd_sb16 device snd_sb8 Alternatively, to load the driver as a module at boot time, place the following lines in loader.conf(5): snd_sbc_load="YES" snd_sb16_load="YES" snd_sb8_load="YES" Non-PnP cards require the following lines in device.hints(5): hint.sbc.0.at="isa" hint.sbc.0.port="0x220" hint.sbc.0.irq="5" hint.sbc.0.drq="1" hint.sbc.0.flags="0x15" DESCRIPTION
The snd_sbc bridge driver allows the generic audio driver sound(4) to attach to Creative Sound Blaster ISA (mostly SB16 or SB8, known as SoundBlaster Pro) compatible audio cards. The value of flags specifies the secondary DMA channel. If the secondary DMA channel is C, set the flags to (C | 0x10). For a sound card without the secondary DMA channel, the flags should be set to zero. HARDWARE
The snd_sbc driver supports the following sound cards: o Avance Asound 110 o Avance Logic ALS100+ o Avance Logic ALS120 o Creative SB16 o Creative SB32 o Creative AWE64 o Creative AWE64 Gold o Creative ViBRA16C o Creative ViBRA16X o ESS ES1681 o ESS ES1688 o ESS ES1868 o ESS ES1869 o ESS ES1878 o ESS ES1879 o ESS ES1888 DIAGNOSTICS
sb_dspwr(XX) timed out. A command to the DSP has timed out. Check the I/O port configuration. bad irq XX (5/7/9/10 valid) The IRQ given to the driver is not valid. SEE ALSO
sound(4) HISTORY
The snd_sbc device driver first appeared in FreeBSD 4.0. AUTHORS
Seigo Tanimura <tanimura@r.dl.itc.u-tokyo.ac.jp> BSD
February 17, 2007 BSD