Audacity 2.1.2 Search Path privileges management ⚔ [Disputed]

Summaryinfo

A vulnerability, which was classified as problematic, was found in Audacity 2.1.2. This vulnerability affects unknown code of the component Search Path Handler. Such manipulation leads to privileges management. Local access is required to approach this attack. No exploit exists. The existence of this vulnerability is still disputed at present.

Detailsinfo

A vulnerability was found in Audacity 2.1.2. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Search Path Handler. The manipulation with an unknown input leads to a privileges management vulnerability. Using CWE to declare the problem leads to CWE-269. The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor. Impacted is confidentiality, integrity, and availability.

The weakness was disclosed 01/03/2017 by Felipe Xavier Oliveira as Advisories Unsafe Dll in Audacity, telegram and Akamai as not defined mailinglist post (Full-Disclosure). The advisory is available at seclists.org. The vendor was not involved in the coordination of the public release. Local access is required to approach this attack. A simple authentication is required for exploitation. The technical details are unknown and an exploit is not available. This vulnerability is assigned to T1068 by the MITRE ATT&CK project. The advisory points out:

Audacity version 2.1.2 is vulnerable to DLL Hijack, it tries to load avformat-55.dll without supplying the absolute path, thus relying upon the presence of such DLL on the system directory. This behavior results in an exploitable DLL Hijack vulnerability, even if the SafeDllSerchMode flag is enabled.

The vulnerability was handled as a non-public zero-day exploit for at least 141 days. During that time the estimated underground price was around $0-$5k. The real existence of this vulnerability is still doubted at the moment.

The mailinglist post contains the following remark:

Audacity neglected the risk.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Name

• Audacity

Version

• 2.1.2

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion