PT-2008-5390 · Acoustica · Acoustica Beatcraft

Koshi · Published 2008-09-15 · Updated 2017-09-29 · CVE-2008-4087

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Acoustica Beatcraft version 1.02 Build 19

Description The issue is a stack-based buffer overflow that can be triggered by a user-assisted attack. This occurs when a Beatcraft Project file contains a long string in a certain instrument's title field. As a result, an attacker could cause a denial of service or potentially execute arbitrary code.

Recommendations For Acoustica Beatcraft version 1.02 Build 19, consider avoiding the use of long strings in instrument title fields within Beatcraft Project files until a fix is available. As a temporary workaround, restrict the length of strings in these fields to prevent potential exploitation.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2008-4087

Affected Products

Acoustica Beatcraft

References · 6

• 🔥 http://securityfocus.com/bid/30938 · Exploit
• 🔥 https://exploit-db.com/exploits/6333 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-4087 · Security Note
• http://securityreason.com/securityalert/4259 · Note
• http://secunia.com/advisories/31660 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44794 · Note