CVE-2008-3877

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• Acoustica Mixcraft 4.2 - Universal Stack Overflow (SEH)2008-12-24 · local · windows · Verified
• Acoustica Mixcraft 4.2 Build 98 - 'mx4' Local Buffer Overflow2008-08-28 · local · windows · Verified

Impact

Stack-based buffer overflow in Acoustica Mixcraft 4.1 Build 96 and 4.2 Build 98 allows user-assisted attackers to execute arbitrary code via a crafted .mx4 file. NOTE: it was later reported that version 3 is also affected.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://secunia.com/advisories/31595
• http://securityreason.com/securityalert/4199
• http://www.securityfocus.com/bid/30879
• http://www.securityfocus.com/bid/33012
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44751
• https://www.exploit-db.com/exploits/6322
• https://www.exploit-db.com/exploits/7577
• http://secunia.com/advisories/31595
• http://securityreason.com/securityalert/4199
• http://www.securityfocus.com/bid/30879
• http://www.securityfocus.com/bid/33012
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44751
• https://www.exploit-db.com/exploits/6322
• https://www.exploit-db.com/exploits/7577