Описание
Ether MP3 CD Burner 1.3.8 contains a buffer overflow vulnerability in the registration name field that allows remote code execution. Attackers can craft a malicious payload to overwrite SEH handlers and execute a bind shell on port 3110 by exploiting improper input validation.
Ссылки
- Product
- ExploitThird Party Advisory
- Third Party Advisory
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:ethersoftware:ether_mp3_cd_burner:1.3.8:*:*:*:*:*:*:*
EPSS
Процентиль: 58%
0.00919
Низкий
9.8 Critical
CVSS3
Дефекты
CWE-787
Связанные уязвимости
CVSS3: 9.8
github
8 месяцев назад
Ether MP3 CD Burner 1.3.8 contains a buffer overflow vulnerability in the registration name field that allows remote code execution. Attackers can craft a malicious payload to overwrite SEH handlers and execute a bind shell on port 3110 by exploiting improper input validation.
EPSS
Процентиль: 58%
0.00919
Низкий
9.8 Critical
CVSS3
Дефекты
CWE-787