CVE-2009-1092

CRITICAL 9.3CVE-2009-1092 · Published 25/03/2009 · updated 16/06/2026

In short

CVE-2009-1092 is a CRITICAL (CVSS 9.3) vulnerability affecting liveaudio activex control (geovision).
Chance of exploitation in the next 30 days (EPSS): 8.8%, higher than 95.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
liveaudio activex control geovision	`= 7.0`	No fix yet

Description

Use-after-free vulnerability in the LIVEAUDIO.LiveAudioCtrl.1 ActiveX control in LIVEAU~1.OCX 7.0 for GeoVision DVR systems allows remote attackers to execute arbitrary code by calling the GetAudioPlayingTime method with certain arguments.

References

retrogod.altervista.org/9sg_geovision_liveaudio_freedmem.html · Exploit
securityfocus.com/archive/1/501773/100/0/threaded
securityfocus.com/bid/34115 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/49238
exploit-db.com/exploits/8206

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free