critical9.8
CVE-2021-47785
Ether MP3 CD Burner 1.3.8 contains a buffer overflow vulnerability in the registration name field that allows remote code execution.
Impact
Ether MP3 CD Burner 1.3.8 contains a buffer overflow vulnerability in the registration name field that allows remote code execution. Attackers can craft a malicious payload to overwrite SEH handlers and execute a bind shell on port 3110 by exploiting improper input validation.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ethersoftware | Ether Mp3 Cd Burner | Version 1.3.8 |