Audiograbber Buffer Overflow Vulnerability Allowing Arbitrary Code Execution

A local buffer overflow vulnerability has been identified in Audiograbber version 1.83. This vulnerability allows attackers to execute arbitrary code by exploiting structured exception handling (SEH) mechanisms. By crafting malicious input in the 'Interpret' or 'Album' fields, attackers can trigger the buffer overflow, overwrite SEH pointers, and execute injected shellcode with the privileges of the application.

Impact

Exploitation of this vulnerability leads to a local buffer overflow, allowing for arbitrary code execution with application privileges.

Reproduction

The vulnerability can be reproduced by entering crafted input into the 'Interpret' or 'Album' fields. This input should be designed to overflow the buffer, overwrite SEH pointers, and execute shellcode.