Vulnerability · Published Jan 22, 2024 · Assigned by VulDB

CVE-2024-0774Any-Capture Any Sound Recorder Registration memory corruption

Medium 5.3

In plain English

A medium-severity memory corruption in Any Sound Recorder from Any-Capture. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 27% of all known vulnerabilities).

Severity (CVSS 3.1)5.3Medium

Exploit odds (30 days)0.3%top 72.9% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A vulnerability was found in Any-Capture Any Sound Recorder 2.93. It has been declared as problematic. This vulnerability affects unknown code of the component Registration Handler. The manipulation of the argument User Name/Key Code leads to memory corruption. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. VDB-251674 is the identifier assigned to this vulnerability.

Affected products (as reported)

Vendor	Product	Versions
Any-Capture	Any Sound Recorder	2.93

Weakness: CWE-119 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

References

https://vuldb.com/?id.251674 vdb-entry, technical-description
https://vuldb.com/?ctiid.251674 signature, permissions-required
https://youtu.be/f_4eHkISrZg exploit, media-coverage