A vulnerability, which was classified as critical, has been found in AVS Audio Converter 10.3. Affected by this issue is some unknown processing. The manipulation with an unknown input leads to a buffer overflow vulnerability. Using CWE to declare the problem leads to CWE-120. The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow. Impacted is confidentiality, integrity, and availability. CVE summarizes:

AVS Audio Converter 10.3 is vulnerable to Buffer Overflow.

The weakness was disclosed 11/28/2022 as 169427. The advisory is shared for download at packetstormsecurity.com. This vulnerability is handled as CVE-2022-44283 since 10/30/2022. Successful exploitation requires user interaction by the victim. There are neither technical details nor an exploit publicly available.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Productinfo

Vendor

• AVS

Name

• Audio Converter

Version

• 10.3

CPE 2.3info

• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion