CVE-2008-0959: Alivemedia Alive MP3 Wav Converter

Medium severity, CVSS 6.8. EPSS: 6% chance of exploitation in the next 30 days.

Multiple stack-based buffer overflows in the Online Media Technologies NCTSoft NCTAudioInformation2 ActiveX control in NCTAudioInformation2.dll, as used in (1) Power Audio CD Grabber 1.0, (2) Power Audio CD Burner 1.02, (3) CinematicMP3 1.4.0.0, (4) Alive MP3 WAV Converter 3.9.3.2, and possibly other products, allow remote attackers to execute arbitrary code via unspecified vectors.

Affected products

• Alivemedia Alive MP3 Wav Converter: version 3.9.3.2 only
• Online Media Technologies Nctaudioeditor Activex Control: any version
• Online Media Technologies Nctaudiostudio Activex Control: any version
• Orion Studios CINEMATICMP3: version 1.4.0.0 only
• Ussun Power Audio Cd Burner: version 1.02 only
• Ussun Power Audio Cd Grabber: version 1.0 only

Published 2008-05-29. Last modified 2026-06-16.