Signature Detail

APP: Acoustica Mixcraft mx4 File Processing Buffer Overflow

This signature detects attempts to exploit a known vulnerability in Acoustica Mixcraft music production application. A successful attack could allow the attacker to execute arbitrary code on the targeted system. Failed exploit attempts could result in a denial of service condition.

Extended Description

Acoustica Mixcraft is prone to a buffer-overflow vulnerability because the application fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer. An attacker could exploit this issue by enticing a victim to load a malicious '.mx4' file. If successful, the attacker can execute arbitrary code in the context of the affected application. Acoustica Mixcraft 4.2 is vulnerable; other versions may also be affected.

Affected Products

• Acoustica Mixcraft 4.1 Build 96
• Acoustica Mixcraft 4.2
• Acoustica Mixcraft 4.2 Build 98

References

• BugTraq: 30879
• BugTraq: 33012
• CVE: CVE-2008-3877