vendor:
Hanso Converter
by:
Necmettin COSKUN
7,8
CVSS
HIGH
Buffer Overflow
119
CWE
Product Name: Hanso Converter
Affected Version From: 2.4.0
Affected Version To: 2.4.0
Patch Exists: YES
Related CWE: N/A
CPE: hanso-converter
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Windows XP SP2
2020
Hanso Converter 2.4.0 Buffer Overflow(DoS)
Hanso Converter 2.4.0 is vulnerable to a buffer overflow vulnerability which can be exploited to cause a denial of service. The vulnerability is caused due to a boundary error when handling specially crafted .ogg files. This can be exploited to cause a stack-based buffer overflow by tricking a user into opening a specially crafted .ogg file. Successful exploitation of this vulnerability may allow an attacker to execute arbitrary code in the context of the application.
Mitigation:
Upgrade to the latest version of Hanso Converter.