critical9.3Public exploit code

CVE-2009-0476

Stack-based buffer overflow in MultiMedia Soft AdjMmsEng.dll 7.11.1.0 and 7.11.2.7, as distributed in multiple MultiMedia Soft audio components for .NET, allow…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Audiotran 1.4.1 - '.pls' Local Stack Buffer Overflow (Metasploit)2010-01-28 · local · windows · Verified
MP3 Workstation 9.2.1.1.2 - Local Overflow (SEH)2010-09-15 · local · windows · Verified
Audiotran 1.4.1 (Windows XP SP2/SP3 English) - Local Buffer Overflow2010-01-10 · local · windows · Verified
Audio Workstation - '.pls' Local Buffer Overflow (SEH)2009-09-24 · local · windows · Verified
Euphonics Audio Player 1.0 (Windows XP SP3) - '.pls' Local Buffer Overflow2009-02-04 · local · windows · Verified
Euphonics Audio Player 1.0 - '.pls' Universal Local Buffer Overflow2009-02-04 · local · windows · Verified
Euphonics Audio Player 1.0 - '.pls' Local Buffer Overflow2009-02-03 · local · windows · Verified

Impact

Stack-based buffer overflow in MultiMedia Soft AdjMmsEng.dll 7.11.1.0 and 7.11.2.7, as distributed in multiple MultiMedia Soft audio components for .NET, allows remote attackers to execute arbitrary code via a long string in a playlist (.pls) file, as originally reported for Euphonics Audio Player 1.0. NOTE: some of these details are obtained from third party information.

Affected products

Vendor	Product	Affected versions
Multimediasoft	Audio Dj Studio For .Net	All versions
Multimediasoft	Audio Sound Editer For .Net	All versions
Multimediasoft	Audio Sound Recorder For .Net	All versions
Multimediasoft	Audio Sound Studio For .Net	All versions
Multimediasoft	Audio Sound Suite For .Net	All versions

Weakness classification

CWE-119

Public exploit code

Impact

Affected products

Weakness classification

References