Ashampoo Burning Studio Elements '.ashprj' File Remote Heap Buffer Overflow Vulnerability

Bugtraq ID:	49932
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Oct 04 2011 12:00AM
Updated:	Oct 04 2011 12:00AM
Credit:	Gjoko Krstic
Vulnerable:	Ashampoo Burning Studio Elements 10.0.9
Not Vulnerable:

Ashampoo Burning Studio Elements '.ashprj' File Remote Heap Buffer Overflow Vulnerability

Burning Studio Elements is prone to a heap-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data.

Successfully exploiting this issue allows remote attackers to execute arbitrary code in the context of the user running the application. Failed exploit attempts likely result in denial-of-service conditions.

Burning Studio Elements 10.0.9 is vulnerable; other versions may also be affected.

Ashampoo Burning Studio Elements '.ashprj' File Remote Heap Buffer Overflow Vulnerability

The following proof-of-concept is available:

• /data/vulnerabilities/exploits/49932.pl

Ashampoo Burning Studio Elements '.ashprj' File Remote Heap Buffer Overflow Vulnerability

References:

• Ashampoo Burning Studio Elements 10.0.9 (.ashprj) Heap Overflow Vulnerability (Zero Science Lab)
  
• Ashampoo Homepage (Ashampoo)