AoA Audio Extractor Basic 'InitLicenKeys()' ActiveX Control Buffer Overflow Vulnerability

Bugtraq ID:	67493
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	May 20 2014 12:00AM
Updated:	May 20 2014 12:00AM
Credit:	metacom
Vulnerable:
Not Vulnerable:

AoA Audio Extractor Basic 'InitLicenKeys()' ActiveX Control Buffer Overflow Vulnerability

AoA Audio Extractor Basic is prone to a buffer-overflow vulnerability because the applications fail to perform adequate boundary checks on user-supplied data.

Attackers can exploit this issue to execute arbitrary code within the context of an application (typically Internet Explorer) that uses the ActiveX control. Failed exploit attempts will result in a denial-of-service condition.

AoA Audio Extractor Basic 2.3.7 is vulnerable; other versions may also be affected.

AoA Audio Extractor Basic 'InitLicenKeys()' ActiveX Control Buffer Overflow Vulnerability

The following exploit is available:

• /data/vulnerabilities/exploits/67493.html.txt

AoA Audio Extractor Basic 'InitLicenKeys()' ActiveX Control Buffer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

AoA Audio Extractor Basic 'InitLicenKeys()' ActiveX Control Buffer Overflow Vulnerability

References:

• Vendor Homepage (AoAMedia)