Vulnerability Description
MAGIX Music Editor 3.1 contains a buffer overflow vulnerability in the FreeDB Proxy Options dialog that allows local attackers to execute arbitrary code by exploiting structured exception handling. Attackers can craft a malicious payload, paste it into the Server field via the CD menu's FreeDB Proxy Options, and trigger code execution when settings are accepted.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Magix | Music Editor Deluxe | <= 3.1 |
Related Weaknesses (CWE)
References
- https://www.exploit-db.com/exploits/46056ExploitVDB Entry
- https://www.magix.com/us/Product
- https://www.magix.com/us/music/mp3-deluxe/Product
- https://www.vulncheck.com/advisories/magix-music-editor-buffer-overflow-via-sehThird Party Advisory
FAQ
What is CVE-2018-25260?
CVE-2018-25260 is a vulnerability with a CVSS score of 8.4 (HIGH). MAGIX Music Editor 3.1 contains a buffer overflow vulnerability in the FreeDB Proxy Options dialog that allows local attackers to execute arbitrary code by exploiting structured exception handling. At...
How severe is CVE-2018-25260?
CVE-2018-25260 has been rated HIGH with a CVSS base score of 8.4/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2018-25260?
Check the references section above for vendor advisories and patch information. Affected products include: Magix Music Editor Deluxe.