This host is installed with Microsoft Video ActiveX Control and is prone to Buffer Overflow vulnerability.

Successful exploitation could allow execution of arbitrary code that affects the TV Tuner library, and can cause memory corruption. Impact Level: Application

Run Windows Update and update the listed hotfixes or download and update mentioned hotfixes in the advisory from the below link, http://www.microsoft.com/technet/security/Bulletin/MS09-032.mspx Workaround: Set the killbit for the CLSID {0955AC62-BF2E-4CBA-A2B9-A63F772D46CF} http://www.microsoft.com/technet/security/advisory/972890.mspx

- Stack-based buffer overflow error in MPEG2TuneRequest in msvidctl.dll in Microsoft DirectShow can be exploited via a crafted web page. - Unspecified error in msvidctl.dll is caused via unknown vectors that trigger memory corruption.

Microsoft Video ActiveX Control on Windows 2000/XP/2003

• http://isc.sans.org/diary.html?storyid=6733
• http://secunia.com/advisories/35683
• http://support.microsoft.com/kb/972890
• http://www.iss.net/threats/329.html

---

Updated on 2015-03-25