CVE-2011-0615
published 2011-05-16CVE-2011-0615: Multiple buffer overflows in Adobe Audition 3.0.1 and earlier allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption…
PriorityP342critical9.3CVSS 2.0
AVNACMAuNCCICAC
EPSS
6.96%
93.4th percentile
Multiple buffer overflows in Adobe Audition 3.0.1 and earlier allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted data in unspecified fields in the TRKM chunk in an Audition Session (aka .ses) file, related to inconsistent use of character data types.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| adobe | audition | <= 3.0.1 | — |
| adobe | audition | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Suricata
ET WEB_CLIENT Adobe Audition Malformed Session File Buffer Overflow Attempt
suricata·2011-06-09
CVE-2011-0615 ET WEB_CLIENT Adobe Audition Malformed Session File Buffer Overflow Attempt
ET WEB_CLIENT Adobe Audition Malformed Session File Buffer Overflow Attempt
Rule: alert http $EXTERNAL_NET any -> $HOME_NET any (msg:"ET WEB_CLIENT Adobe Audition Malformed Session File Buffer Overflow Attempt"; flow:established,to_client; file.data; content:"COOLNESS"; content:"TRKM"; distance:0; content:"A|00|u|00|d|00|i|00|t|00|i|00|o|00|n|00|"; nocase; distance:0; content:"A|00|u|00|d|00|i|00|o|00 20 00|O|00|u|00|t|00|p|00|u|00|t|00|"; fast_pattern; nocase; distance:0; isdataat:100,relative; content:!"|0A|"; within:100; reference:url,www.coresecurity.com/content/Adobe-Audition-malformed-SES-file; reference:bid,47838; reference:cve,2011-0615; classtype:attempted-user; sid:2012978; rev:3; metadata:affected_product Web_Browsers, affected_product Web_Browser_Plugins, attack_target Client_
No public exploits indexed.
No writeups or analysis indexed.
http://www.adobe.com/support/security/bulletins/apsb11-10.htmlhttp://www.coresecurity.com/content/Adobe-Audition-malformed-SES-filehttp://www.securityfocus.com/bid/47838http://www.adobe.com/support/security/bulletins/apsb11-10.htmlhttp://www.coresecurity.com/content/Adobe-Audition-malformed-SES-filehttp://www.securityfocus.com/bid/47838
2011-05-16
Published