GoldWave Buffer Overflow Vulnerability Allowing Arbitrary Code Execution

A buffer overflow vulnerability has been identified in GoldWave version 5.70. This vulnerability allows attackers to execute arbitrary code by crafting malicious input for the File Open URL dialog. By generating a specially crafted text file containing Unicode-encoded shellcode, attackers can trigger a stack-based overflow and execute commands when the file is opened.

Impact

Exploitation of this vulnerability leads to a stack-based buffer overflow, allowing for arbitrary code execution on the affected system.

Reproduction

To reproduce this vulnerability, open GoldWave 5.70 and select 'File', then 'Open URL...'. Paste the contents of a crafted text file that includes Unicode-encoded shellcode into the URL dialog after 'http://', and click 'OK'. This will trigger the buffer overflow and execute the embedded shellcode.