A-PDF All to MP3 Converter '.wav' File Remote Buffer Overflow Vulnerability

Bugtraq ID:	43301
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Sep 17 2010 12:00AM
Updated:	Nov 14 2012 06:40AM
Credit:	modpr0be
Vulnerable:	A-Pdf A-PDF All to MP3 Converter 2.0 A-Pdf A-PDF All to MP3 Converter 1.1
Not Vulnerable:

A-PDF All to MP3 Converter '.wav' File Remote Buffer Overflow Vulnerability

A-PDF All to MP3 Converter is prone to a remote buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data.

Attackers may leverage this issue to execute arbitrary code in the context of the application. Failed exploit attempts may result in a denial-of-service condition.

A-PDF All to MP3 Converter versions 2.3.0 and prior are affected.

A-PDF All to MP3 Converter '.wav' File Remote Buffer Overflow Vulnerability

The following exploits are available:

• /data/vulnerabilities/exploits/43301.py
• /data/vulnerabilities/exploits/43301.pl
• /data/vulnerabilities/exploits/43301-2.pl
• /data/vulnerabilities/exploits/43301-3.pl
• /data/vulnerabilities/exploits/43301.rb
• /data/vulnerabilities/exploits/43301_1.py

A-PDF All to MP3 Converter '.wav' File Remote Buffer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

A-PDF All to MP3 Converter '.wav' File Remote Buffer Overflow Vulnerability

References:

• A-PDF All to MP3 Converter Homepage (A-PDF)