Description
Ether MP3 CD Burner 1.3.8 contains a buffer overflow vulnerability in the registration name field that allows remote code execution. Attackers can craft a malicious payload to overwrite SEH handlers and execute a bind shell on port 3110 by exploiting improper input validation.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Mp3-Avi-Mpeg-Wmv-Rm-To-Audio-Cd-Burner | Ether_MP3_CD_Burner | 1.3.8 | — |
References
- ExploitDB-50332 exploit
- Software Download Link product
- VulnCheck Advisory: Ether_MP3_CD_Burner 1.3.8 - Buffer Overflow (SEH) third-party-advisory