PT-2024-15891 · Poikosoft · Poikosoft Ez Cd Audio Converter

Fernando Mengali + 1 · Published 2024-01-25 · Updated 2024-05-17 · CVE-2024-0886

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Poikosoft EZ CD Audio Converter version 8.0.7

Description A problematic vulnerability was found in the Activation Handler component. The manipulation of the Key argument leads to denial of service. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used.

Recommendations For Poikosoft EZ CD Audio Converter version 8.0.7, as a temporary workaround, consider restricting local access to the Activation Handler component until a patch is available. Avoid manipulating the Key argument in the affected component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Resource Release

Weakness Enumeration

CWE-404

Related Identifiers

CVE-2024-0886

Affected Products

Poikosoft Ez Cd Audio Converter

References · 7

• 🔥 https://fitoxs.com/vuldb/09-exploit-perl.txt · Exploit
• https://osv.dev/vulnerability/CVE-2024-0886 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-0886 · Security Note
• https://t.me/cvenotify/69441 · Telegram Post
• https://vuldb.com/?id.252037 · Note
• https://twitter.com/CVEnew/status/1750634133783761179 · Twitter Post
• https://vuldb.com/?ctiid.252037 · Note