what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

NCMedia Sound Editor Pro 7.5.1 Buffer Overflow

Posted Sep 17, 2012

Authored by Julien Ahrens | Site security.inshell.net

A local buffer overflow vulnerability has been found on the NCMedia Sound Editor Pro version 7.5.1. The application saves the paths for all recently used files in a file called "MRUList201202.dat" in the directory %appdata%\Sound Editor Pro\. When clicking on the "File" menu item the application reads the contents of the file, but does not validate the length of the string loaded from the file before passing it to a buffer, which leads to a stack-based buffer overflow.

tags | exploit, overflow, local

SHA-256 | a1f0e2a2be8b3403de464902a0d925d7567541a522d8d12be77fb9410aac9104

Download | Favorite | View

Related Files

No related files