Free and open · new CVEs checked every 20 minutesStatusRSSOpen dataContact

CVE-2008-0959: Multiple stack-based buffer overflows in the Online Media Technologies NCTSoft NCTAudioInformation2 ActiveX co

47
This month
MEDIUM 6.8DOWNGRADEMITIGATEMITIGATE

CVE-2008-0959 is a medium-severity flaw (CVSS 6.8) affecting alive mp3 wav converter, nctaudioeditor activex control, nctaudiostudio activex control. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

Multiple stack-based buffer overflows in the Online Media Technologies NCTSoft NCTAudioInformation2 ActiveX control in NCTAudioInformation2.dll, as used in (1) Power Audio CD Grabber 1.0, (2) Power Audio CD Burner 1.02, (3) CinematicMP3 1.4.0.0, (4) Alive MP3 WAV Converter 3.9.3.2, and possibly other products, allow remote attackers to execute arbitrary code via unspecified vectors.

Why this priority

  • EPSS top 7%: very likely to be exploited

No fix is published yet: follow the downgrade or mitigation steps.

Risk facts

CVSS score6.8 (Medium)
EPSS exploit chance6.0% (top 7%)
CISA exploited listNo
WeaknessCWE-119
Published2008-05-29
Last modified2026-06-16
Publisher (CNA): CERT/CC · Vendor: alivemedia · online media technologies · orion studios · ussun

Share: LinkedIn · X · Reddit

Last updated 2026-06-16 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

alivemedia alive mp3 wav converter DOWNGRADE
Affected: 3.9.3.2
Fixed in: no fixed release known
Safe to downgrade to: a release before 3.9.3.2
1. Check installed version
apt-cache policy alive-mp3-wav-converter || rpm -q alive-mp3-wav-converter || alive-mp3-wav-converter --version
2. No fixed release: DOWNGRADE to a release before 3.9.3.2 (Debian / Ubuntu)
apt-cache madison alive-mp3-wav-converter sudo apt install alive-mp3-wav-converter=<VERSION_BEFORE_3.9.3.2> sudo apt-mark hold alive-mp3-wav-converter
2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list alive-mp3-wav-converter sudo dnf downgrade alive-mp3-wav-converter-<VERSION_BEFORE_3.9.3.2> sudo dnf versionlock add alive-mp3-wav-converter
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
online media technologies nctaudioeditor activex control MITIGATE
Affected: all versions
Fixed in: no fixed release known
Safe to downgrade to: no unaffected older release
1. Check installed version
apt-cache policy nctaudioeditor-activex-control || rpm -q nctaudioeditor-activex-control || nctaudioeditor-activex-control --version
No fixed or unaffected release known
Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access.
online media technologies nctaudiostudio activex control MITIGATE
Affected: all versions
Fixed in: no fixed release known
Safe to downgrade to: no unaffected older release
1. Check installed version
apt-cache policy nctaudiostudio-activex-control || rpm -q nctaudiostudio-activex-control || nctaudiostudio-activex-control --version
No fixed or unaffected release known
Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access.
orion studios cinematicmp3 DOWNGRADE
Affected: 1.4.0.0
Fixed in: no fixed release known
Safe to downgrade to: a release before 1.4.0.0
1. Check installed version
apt-cache policy cinematicmp3 || rpm -q cinematicmp3 || cinematicmp3 --version
2. No fixed release: DOWNGRADE to a release before 1.4.0.0 (Debian / Ubuntu)
apt-cache madison cinematicmp3 sudo apt install cinematicmp3=<VERSION_BEFORE_1.4.0.0> sudo apt-mark hold cinematicmp3
2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list cinematicmp3 sudo dnf downgrade cinematicmp3-<VERSION_BEFORE_1.4.0.0> sudo dnf versionlock add cinematicmp3
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
ussun power audio cd burner DOWNGRADE
Affected: 1.02
Fixed in: no fixed release known
Safe to downgrade to: a release before 1.02
1. Check installed version
apt-cache policy power-audio-cd-burner || rpm -q power-audio-cd-burner || power-audio-cd-burner --version
2. No fixed release: DOWNGRADE to a release before 1.02 (Debian / Ubuntu)
apt-cache madison power-audio-cd-burner sudo apt install power-audio-cd-burner=<VERSION_BEFORE_1.02> sudo apt-mark hold power-audio-cd-burner
2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list power-audio-cd-burner sudo dnf downgrade power-audio-cd-burner-<VERSION_BEFORE_1.02> sudo dnf versionlock add power-audio-cd-burner
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
ussun power audio cd grabber DOWNGRADE
Affected: 1.0
Fixed in: no fixed release known
Safe to downgrade to: a release before 1.0
1. Check installed version
apt-cache policy power-audio-cd-grabber || rpm -q power-audio-cd-grabber || power-audio-cd-grabber --version
2. No fixed release: DOWNGRADE to a release before 1.0 (Debian / Ubuntu)
apt-cache madison power-audio-cd-grabber sudo apt install power-audio-cd-grabber=<VERSION_BEFORE_1.0> sudo apt-mark hold power-audio-cd-grabber
2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list power-audio-cd-grabber sudo dnf downgrade power-audio-cd-grabber-<VERSION_BEFORE_1.0> sudo dnf versionlock add power-audio-cd-grabber
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2008-0959?

alive mp3 wav converter: downgrade or apply the listed mitigation; nctaudioeditor activex control: mitigate or apply the listed mitigation; nctaudiostudio activex control: mitigate or apply the listed mitigation. Exact commands for each OS are on this page.

Is CVE-2008-0959 being exploited?

CVE-2008-0959 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2008-0959 affect?

CVE-2008-0959 affects alive mp3 wav converter, nctaudioeditor activex control, nctaudiostudio activex control. Severity is medium (CVSS 6.8). Multiple stack-based buffer overflows in the Online Media Technologies NCTSoft NCTAudioInformation2 ActiveX control in NCTAudioInformation2.dll, as used in (1) Power Audio CD Grabber 1.0, (2) Power Audio CD Burner 1.02, (3) CinematicMP3 1.4

How urgent is CVE-2008-0959?

Priority 47/100. EPSS top 7%: very likely to be exploited

References

← Back to latest CVEs

Get the weekly exploited-CVE digest by emailThe CVEs being attacked this week and how to fix them. No spam, unsubscribe any time.