Description (CNA)
AVS Audio Converter 9.1 contains a local buffer overflow vulnerability that allows local attackers to overwrite CPU registers by manipulating the 'Exit folder' input field. Attackers can craft a specially designed text file with 264 bytes of padding followed by register overwrite values to compromise the application and potentially execute arbitrary code.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| AVS4YOU / AVS Audio Converter | affected 9.1 |
CWE
CWE-121
References
- https://www.exploit-db.com/exploits/47788
- http://www.avs4you.com/
- https://www.vulncheck.com/advisories/avs-audio-converter-exit-folder-buffer-overflow
ADP enrichment
No English description supplied.
No references supplied.