Boxoft WAV-WMA Converter Buffer Overflow Vulnerability Allowing Arbitrary Code Execution

A local buffer overflow vulnerability has been identified in Boxoft WAV-WMA Converter version 1.0. This vulnerability arises from improper handling of structured exception management, allowing attackers to execute arbitrary code by crafting malicious WAV files. Exploitation involves overwriting the exception handling chain with return-oriented programming (ROP) gadgets to gain code execution on affected Windows systems.

Impact

Exploitation of this vulnerability allows for arbitrary code execution on the affected Windows system.

Reproduction

The vulnerability can be reproduced by creating a WAV file that contains excessive data designed to overflow the buffer. This crafted file should include ROP gadgets to overwrite the Structured Exception Handling (SEH) chain. Once the malicious WAV file is created, it can be used to exploit the buffer overflow vulnerability in the Boxoft WAV-WMA Converter.