CVE-2008-0955: Creative Software Autoupdate Engine

High severity, CVSS 9.3. EPSS: 41.2% chance of exploitation in the next 30 days.

Stack-based buffer overflow in the Creative Software AutoUpdate Engine ActiveX control in CTSUEng.ocx allows remote attackers to execute arbitrary code via a long CacheFolder property value.

Affected products

• Creative Creative Software Autoupdate Engine: any version

Published 2008-05-29. Last modified 2026-06-16.