vendor:
DeepBurner
by:
Anonymous
7.8
CVSS
HIGH
Stack Buffer Overflow
119
CWE
Product Name: DeepBurner
Affected Version From: 1.9.0.228
Affected Version To: 1.9.0.228
Patch Exists: YES
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Windows
2019
DeepBurner 1.9.0.228 Stack Buffer Overflow (SEH overwrite)
DeepBurner 1.9.0.228 is vulnerable to a stack buffer overflow vulnerability due to a lack of proper bounds checking which can be exploited to overwrite the SEH chain and execute arbitrary code. The vulnerability exists in the 'burner.c' file, where a user-supplied argument is copied into a 1024-byte buffer without proper bounds checking. An attacker can exploit this vulnerability by supplying a long argument to the program, which will overwrite the SEH chain and execute arbitrary code.
Mitigation:
Upgrade to the latest version of DeepBurner 1.9.0.228 or later.
