Vulnerability · Published Jan 25, 2024 · Assigned by VulDB

CVE-2024-0886Poikosoft EZ CD Audio Converter Activation denial of service

Low 3.3

In plain English

A low-severity security flaw in EZ CD Audio Converter from Poikosoft. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 32% of all known vulnerabilities).

Severity (CVSS 3.1)3.3Low

Exploit odds (30 days)0.4%top 68.0% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A vulnerability classified as problematic was found in Poikosoft EZ CD Audio Converter 8.0.7. Affected by this vulnerability is an unknown functionality of the component Activation Handler. The manipulation of the argument Key leads to denial of service. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The identifier VDB-252037 was assigned to this vulnerability.

Affected products (as reported)

Vendor	Product	Versions
Poikosoft	EZ CD Audio Converter	8.0.7

Weakness: CWE-404 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

References

https://vuldb.com/?id.252037 vdb-entry, technical-description
https://vuldb.com/?ctiid.252037 signature, permissions-required
https://fitoxs.com/vuldb/09-exploit-perl.txt exploit