Free MP3 CD Ripper Stack Buffer Overflow Vulnerability Allowing Remote Code Execution

A stack buffer overflow vulnerability has been identified in Free MP3 CD Ripper version 2.8. This vulnerability allows remote attackers to execute arbitrary code by crafting a malicious WAV file with an oversized payload. Exploitation involves using a specially crafted file that includes shellcode, bypasses the Structured Exception Handling (SEH) mechanism, and employs an egghunter technique to achieve remote code execution on vulnerable Windows systems.

Impact

Exploitation of this vulnerability leads to remote code execution on the affected system.

Reproduction

The vulnerability can be reproduced by using a crafted WAV file that exploits the stack buffer overflow. The exploit must include shellcode, an SEH bypass, and an egghunter to successfully execute arbitrary code. This can be done using a Python script that writes the exploit payload into a WAV file, which can then be processed by the Free MP3 CD Ripper application.