Description
GoldWave 5.70 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by crafting malicious input in the File Open URL dialog. Attackers can generate a specially crafted text file with Unicode-encoded shellcode to trigger a stack-based overflow and execute commands when the file is opened.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| GoldWave | GoldWave | 5.70 | — |
References
- ExploitDB-48510 exploit
- Official Vendor Homepage product
- VulnCheck Advisory: GoldWave 5.70 – Buffer Overflow (SEH Unicode) third-party-advisory