NVD Vulnerability Detail

CVE-2010-2343

Summary	Stack-based buffer overflow in D.R. Software Audio Converter 8.1, 2007, and 8.05 allows remote attackers to execute arbitrary code via a crafted pls playlist file.
Publication Date	June 22, 2010, 12:30 a.m.
Registration Date	Jan. 29, 2021, 11:02 a.m.
Last Update	Nov. 21, 2024, 10:16 a.m.

Affected software configurations

Configuration1	or higher	or less	more than	less than
cpe:2.3:a:dennisre:audio_converter:2007:::::::*
cpe:2.3:a:dennisre:audio_converter:8.1:::::::*
cpe:2.3:a:dennisre:audio_converter:8.05:::::::*

Related information, measures and tools

No	URL	タグ
1	http://osvdb.org/65256
2	http://osvdb.org/65256
3	http://secunia.com/advisories/40081	Vendor Advisory
4	http://secunia.com/advisories/40081	Vendor Advisory
5	http://www.corelan.be:8800/index.php/forum/security-advisories/corelan-10-048-d-r-software-multiple-products/
6	http://www.corelan.be:8800/index.php/forum/security-advisories/corelan-10-048-d-r-software-multiple-products/
7	http://www.exploit-db.com/exploits/13760	Exploit
8	http://www.exploit-db.com/exploits/13760	Exploit
9	http://www.exploit-db.com/exploits/13763	Exploit
10	http://www.exploit-db.com/exploits/13763	Exploit
11	http://www.securityfocus.com/bid/40618	Exploit
12	http://www.securityfocus.com/bid/40618	Exploit
13	http://www.securityfocus.com/bid/40631
14	http://www.securityfocus.com/bid/40631
15	http://www.vupen.com/english/advisories/2010/1387	Vendor Advisory
16	http://www.vupen.com/english/advisories/2010/1387	Vendor Advisory
17	https://exchange.xforce.ibmcloud.com/vulnerabilities/59206
18	https://exchange.xforce.ibmcloud.com/vulnerabilities/59206

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-119	バッファエラー	https://cwe.mitre.org/data/definitions/118.html

JVN Vulnerability Information

D.R. Software Audio Converter におけるスタックベースのバッファオーバーフローの脆弱性

Title	D.R. Software Audio Converter におけるスタックベースのバッファオーバーフローの脆弱性
Summary	D.R. Software Audio Converter には、スタックベースのバッファオーバーフローの脆弱性が存在します。
Possible impacts	第三者により、巧妙に細工された pls プレイリストファイルを介して、任意のコードを実行される可能性があります。
Solution	参考情報を参照して適切な対策を実施してください。
Publication Date	June 21, 2010, midnight
Registration Date	June 26, 2012, 4:19 p.m.
Last Update	June 26, 2012, 4:19 p.m.

Affected System

dennisre

audio converter 8.1、2007、および 8.05

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2010-2343	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2343
National Vulnerability Database (NVD)
2	CVE-2010-2343	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-2343

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-119	https://jvndb.jvn.jp/ja/cwe/CWE-119.html

Change Log

No	Changed Details	Date of change
0	[2012年06月26日] 掲載	Feb. 17, 2018, 10:37 a.m.