Adobe Audition '.ses' (CVE-2011-0614) Buffer Overflow Vulnerability

Bugtraq ID:	47841
Class:	Boundary Condition Error
CVE:	CVE-2011-0614
Remote:	Yes
Local:	No
Published:	May 12 2011 12:00AM
Updated:	May 13 2011 08:12AM
Credit:	Gjoko Krstic of Zero Science Lab
Vulnerable:
Not Vulnerable:

Adobe Audition '.ses' (CVE-2011-0614) Buffer Overflow Vulnerability

Adobe Audition is prone to a remote memory-corruption vulnerability.

Attackers may exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts may result in a denial-of-service condition.

Adobe Audition 3.0.1 is vulnerable; other versions may also be affected.

Adobe Audition '.ses' (CVE-2011-0614) Buffer Overflow Vulnerability

The following proof-of-concept is available:

• /data/vulnerabilities/exploits/47841.pl

Adobe Audition '.ses' (CVE-2011-0614) Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references for more information.

Adobe Audition '.ses' (CVE-2011-0614) Buffer Overflow Vulnerability

References:

• Adobe Audition 3.0 (build 7283) Session File Handling Buffer Overflow PoC (Zero Science Lab)
  
• Audition Homepage (Adobe)
  
• Potential vulnerabilities in Adobe Audition (Adobe )