vendor:
A-PDF All to MP3 Converter
by:
George Washington
6.1
CVSS
HIGH
DEP Bypass
119
CWE
Product Name: A-PDF All to MP3 Converter
Affected Version From: 2.0.0
Affected Version To: 2.0.0
Patch Exists: NO
Related CWE:
CPE:
Platforms Tested: Windows 7 Ultimate 6.1.7601 SP1 Build 7601 x64
2023
A-PDF All to MP3 Converter 2.0.0 – DEP Bypass with HeapCreate + HeapAlloc + some_memory_copy_function ROP chain
The exploit bypasses Data Execution Prevention (DEP) in A-PDF All to MP3 Converter version 2.0.0 by utilizing HeapCreate, HeapAlloc, and some_memory_copy_function ROP chain. By manipulating specific parameters and memory allocations, an attacker can execute arbitrary code on the target system.
Mitigation:
To mitigate this vulnerability, users should update to a patched version of A-PDF All to MP3 Converter. Additionally, users can enhance system security by implementing proper input validation and restricting unnecessary system access.
