MightSOFT Audio Editor Pro MP3 File Unspecified Memory Corruption Vulnerability

Bugtraq ID:	35719
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Jul 16 2009 12:00AM
Updated:	Jul 17 2009 09:56PM
Credit:	Gjoko 'LiquidWorm' Krstic
Vulnerable:	MightSOFT Audio Editor Pro 2.91 MightSOFT Audio Editor Pro 2
Not Vulnerable:

MightSOFT Audio Editor Pro MP3 File Unspecified Memory Corruption Vulnerability

MightSOFT Audio Editor Pro is prone to an unspecified memory-corruption vulnerability.

An attacker can exploit this issue by tricking a victim into opening a malicious MP3 file to execute arbitrary code and to cause denial-of-service conditions.

Audio Editor Pro 2.91 is vulnerable; other versions may also be affected.

MightSOFT Audio Editor Pro MP3 File Unspecified Memory Corruption Vulnerability

A proof-of-concept MP3 file is available.

Note that Symantec has not verified the contents of this file; users should be cautious when handling proof-of-concept or exploit files.

• /data/vulnerabilities/exploits/2009-aimp2_evil.mp3

MightSOFT Audio Editor Pro MP3 File Unspecified Memory Corruption Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

MightSOFT Audio Editor Pro MP3 File Unspecified Memory Corruption Vulnerability

References:

• Vendor Homepage (MightSOFT)