CVE-2021-47785

Summary

Ether MP3 CD Burner 1.3.8 contains a buffer overflow vulnerability in the registration name field that allows remote code execution. Attackers can craft a malicious payload to overwrite SEH handlers and execute a bind shell on port 3110 by exploiting improper input validation.

Affected Software

Weaknesses

• CWE-787: Out-of-bounds Write

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: no
  • Technical Impact: total

Additional References

• https://www.exploit-db.com/exploits/50332

References

• https://www.exploit-db.com/exploits/50332
• https://download.cnet.com/mp3avimpegwmvrm-to-audio-cd-burner/3000-2646_4-10658515.html
• https://www.vulncheck.com/advisories/ethermpcdburner-buffer-overflow-seh

• ←Previous
• Next→