PT-2008-5390 · Acoustica · Acoustica Beatcraft

Koshi · Publicado 2008-09-15 · Atualizado 2017-09-29 · CVE-2008-4087

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Acoustica Beatcraft version 1.02 Build 19

Description The issue is a stack-based buffer overflow that can be triggered by a user-assisted attack. This occurs when a Beatcraft Project file contains a long string in a certain instrument's title field. As a result, an attacker could cause a denial of service or potentially execute arbitrary code.

Recommendations For Acoustica Beatcraft version 1.02 Build 19, consider avoiding the use of long strings in instrument title fields within Beatcraft Project files until a fix is available. As a temporary workaround, restrict the length of strings in these fields to prevent potential exploitation.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2008-4087

Produtos afetados

Acoustica Beatcraft

Referências · 6

• 🔥 http://securityfocus.com/bid/30938 · Exploit
• 🔥 https://exploit-db.com/exploits/6333 · Exploit
• http://securityreason.com/securityalert/4259 · Nota
• http://secunia.com/advisories/31660 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-4087 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44794 · Nota