Description
AVS Audio Converter 9.1 contains a local buffer overflow vulnerability that allows local attackers to overwrite CPU registers by manipulating the 'Exit folder' input field. Attackers can craft a specially designed text file with 264 bytes of padding followed by register overwrite values to compromise the application and potentially execute arbitrary code.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| AVS4YOU | AVS Audio Converter | 9.1 | — |
References
- ExploitDB-47788 exploit
- Official Vendor Homepage product
- VulnCheck Advisory: AVS Audio Converter 9.1 - 'Exit folder' Buffer Overflow third-party-advisory