Advisories

Ether_MP3_CD_Burner 1.3.8 - Buffer Overflow (SEH)

Go Back
severity
high
date
Affecting
  • Ether_MP3_CD_Burner 1.3.8

CWE
  • CWE-787 Out-of-bounds Write
CVSS
7
CVSS V4 Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Credit
Achilles
Description
Ether MP3 CD Burner 1.3.8 contains a buffer overflow vulnerability in the registration name field that allows remote code execution. Attackers can craft a malicious payload to overwrite SEH handlers and execute a bind shell on port 3110 by exploiting improper input validation.