Zortam Mp3 Media Studio Buffer Overflow Vulnerability Allowing Remote Code Execution

A buffer overflow vulnerability has been identified in Zortam Mp3 Media Studio version 27.60. The issue arises during the library creation file selection process, where attackers can exploit the vulnerability to execute remote code. By crafting a malicious text file containing shellcode, an attacker can trigger an overwrite of the structured exception handler (SEH), leading to the execution of arbitrary commands on the target system.

Impact

Exploitation of this vulnerability allows for remote code execution on the affected system.

Reproduction

The vulnerability can be reproduced by using a Perl script to create a text file that exploits the buffer overflow. This file is then pasted into the 'Select Folder' field when creating a new library in Zortam Mp3 Media Studio. Once the 'OK' button is clicked, the shellcode is executed on the system.