MEDIUM
Any-Capture Any Sound Recorder Registration memory corruption
Published Jan 22, 2024
5.5
MEDIUMCVSS 3.1
EPSS 0.34%
Description
A vulnerability was found in Any-Capture Any Sound Recorder 2.93. It has been declared as problematic. This vulnerability affects unknown code of the component Registration Handler. The manipulation of the argument User Name/Key Code leads to memory corruption. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. VDB-251674 is the identifier assigned to this vulnerability.
Affected products
-
- Version 2.93StatusaffectedConstraints-
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Any-Capture | Any Sound Recorder | n/a |
|
- 2.93
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (4)
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-16562 Advisory
- https://vuldb.com/?ctiid.251674 signaturepermissions-requiredPermissions RequiredThird Party Advisory
- https://vuldb.com/?id.251674 vdb-entrytechnical-descriptionThird Party Advisory
- https://youtu.be/f_4eHkISrZg exploitmedia-coverage
| Link | Providers | Tags |
|---|---|---|
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-16562 | Advisory | |
| https://vuldb.com/?ctiid.251674 | signaturepermissions-requiredPermissions RequiredThird Party Advisory | |
| https://vuldb.com/?id.251674 | vdb-entrytechnical-descriptionThird Party Advisory | |
| https://youtu.be/f_4eHkISrZg | exploitmedia-coverage |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner VulDB
Published Jan 22, 2024
Updated Nov 13, 2024
Reserved Jan 21, 2024
Link CVE-2024-0774
CISA Vulnrichment
Updated Nov 13, 2024
ENISA EUVD
EUVD-2024-16562 Assigner VulDB
Published Jan 22, 2024
Updated Nov 13, 2024
Exploited since n/a
Link EUVD-2024-16562