Adobe Audition '.ses' (CVE-2011-0615) Buffer Overflow Vulnerability

Bugtraq ID:	47838
Class:	Boundary Condition Error
CVE:	CVE-2011-0615
Remote:	Yes
Local:	No
Published:	May 12 2011 12:00AM
Updated:	May 12 2011 12:00AM
Credit:	Diego Juarez, Eduardo Koch, and Laura Balian from Core Security Technologies
Vulnerable:
Not Vulnerable:

Adobe Audition '.ses' (CVE-2011-0615) Buffer Overflow Vulnerability

Adobe Audition is prone to a remote buffer-overflow vulnerability.

Attackers may exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts may result in a denial-of-service condition.

Adobe Audition 3.0.1 is vulnerable; other versions may also be affected.

Adobe Audition '.ses' (CVE-2011-0615) Buffer Overflow Vulnerability

The following proof of concept is available:

• /data/vulnerabilities/exploits/47838.txt

Adobe Audition '.ses' (CVE-2011-0615) Buffer Overflow Vulnerability

Solution:
Vendor updates are available. Please see the references for more information.

Adobe Audition '.ses' (CVE-2011-0615) Buffer Overflow Vulnerability

References:

• Audition Homepage (Adobe)
  
• CORE-2011-0204: Adobe Audition vulnerability processing malformed session file (advisories)
  
• Adobe Audition vulnerability processing malformed session file (Core Security Technologies)
  
• APSB11-10 Potential vulnerabilities in Adobe Audition (Adobe)