MultiMedia Soft Multiple Components 'AdjMmsEng.dll' PLS File Buffer Overflow Vulnerability
BID:33589
Info
MultiMedia Soft Multiple Components 'AdjMmsEng.dll' PLS File Buffer Overflow Vulnerability
| Bugtraq ID: | 33589 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 03 2009 12:00AM |
| Updated: | Feb 10 2009 03:28PM |
| Credit: | h4ck3r#47 |
| Vulnerable: |
MultiMedia Soft Audio Sound Suite for .NET 0 MultiMedia Soft Audio Sound Studio for .NET 0 MultiMedia Soft Audio Sound Recorder for .NET 0 MultiMedia Soft Audio Sound Editor for .NET 0 MultiMedia Soft Audio DJ Studio for .NET 0 Euphonics Euphonics 1.0 |
| Not Vulnerable: | |
Discussion
MultiMedia Soft Multiple Components 'AdjMmsEng.dll' PLS File Buffer Overflow Vulnerability
Multiple MultiMedia Soft components are prone to a stack-based buffer-overflow vulnerability because they fail to perform adequate boundary checks on user-supplied input.
Successfully exploiting this issue may allow remote attackers to execute arbitrary code in the context of the applications using the vulnerable components. Failed exploit attempts will cause denial-of-service conditions.
The following components are vulnerable:
Audio DJ Studio for .NET
Audio Sound Recorder for .NET
Audio Sound Editor for .NET
Audio Sound Suite for .NET
Audio Sound Studio for .NET
NOTE: This BID was initially titled 'Euphonics '.pls' File Buffer Overflow Vulnerability' but has been updated because more details are now available. Euphonics 1.0 is vulnerable because it uses a vulnerable version of one of the MultiMedia Soft components.
Multiple MultiMedia Soft components are prone to a stack-based buffer-overflow vulnerability because they fail to perform adequate boundary checks on user-supplied input.
Successfully exploiting this issue may allow remote attackers to execute arbitrary code in the context of the applications using the vulnerable components. Failed exploit attempts will cause denial-of-service conditions.
The following components are vulnerable:
Audio DJ Studio for .NET
Audio Sound Recorder for .NET
Audio Sound Editor for .NET
Audio Sound Suite for .NET
Audio Sound Studio for .NET
NOTE: This BID was initially titled 'Euphonics '.pls' File Buffer Overflow Vulnerability' but has been updated because more details are now available. Euphonics 1.0 is vulnerable because it uses a vulnerable version of one of the MultiMedia Soft components.
Exploit / POC
MultiMedia Soft Multiple Components 'AdjMmsEng.dll' PLS File Buffer Overflow Vulnerability
To exploit this issue, an attacker must entice an unsuspecting user to open a malicious file using the affected application.
The following exploits are available:
To exploit this issue, an attacker must entice an unsuspecting user to open a malicious file using the affected application.
The following exploits are available:
Solution / Fix
MultiMedia Soft Multiple Components 'AdjMmsEng.dll' PLS File Buffer Overflow Vulnerability
Solution:
Vendor updates are available. Please contact the vendor for details.
Solution:
Vendor updates are available. Please contact the vendor for details.
References
MultiMedia Soft Multiple Components 'AdjMmsEng.dll' PLS File Buffer Overflow Vulnerability
References:
References:
- Euphonics Homepage (Euphonics)
- MultiMedia Soft Homepage (MultiMedia Soft)