Description
Free MP3 CD Ripper 2.8 contains a stack buffer overflow vulnerability that allows remote attackers to execute arbitrary code by crafting a malicious WAV file with oversized payload. Attackers can leverage a specially crafted exploit file with shellcode, SEH bypass, and egghunter technique to achieve remote code execution on vulnerable Windows systems.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Cleanersoft Software | Free MP3 CD Ripper | 2.8 Build 20140611 | — |
References
- ExploitDB-48696 exploit
- Vendor Homepage product
- VulnCheck Advisory: Free MP3 CD Ripper 2.8 - Stack Buffer Overflow (SEH + Egghunter) third-party-advisory