Impact
Audiograbber 1.83 contains a local buffer overflow that can be triggered by malformed input in the Interpret or Album fields. The overflow overwrites structured exception handling (SEH) pointers, allowing an attacker to launch arbitrary code with the privileges of the application. This can lead to full compromise of the local system where the software is running.
Affected Systems
The vulnerability affects the Audiograbber application, specifically version 1.83. No additional vendor or product variants are listed.
Risk and Exploitability
The CVSS score of 8.6 indicates high severity. An attacker would need local access to the machine or the ability to supply crafted input to the program. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog, suggesting no widespread exploitation reports yet. However, the potential for code execution remains high for any user running the affected application.
OpenCVE Enrichment