Impact
AnMing MP3 CD Burner 2.0 contains a buffer overflow in the registration name field that allows a local user to provide an oversized string and crash the program. The attacker supplies a 6000-byte payload causing the application to terminate, resulting in a denial of service for any user of the software. This weakness is classified as CWE-434, an unrestricted input to a resource handling function. The impact is limited to the local system where the software runs, but repeated crashes can prevent the use of the burner and reduce availability.
Affected Systems
The vulnerability affects the AnMing MP3 CD Burner 2.0 application distributed by Ddz1977. No specific patched version is listed, so all installations of version 2.0 remain vulnerable.
Risk and Exploitability
The CVSS score for this flaw is 6.9, indicating medium severity. Exploit probability data is not available and it is not listed in the CISA KEV catalog. The attack vector is local: the attacker must have access to the machine to supply the malicious input. Because the flaw results only in a program crash, no privileged escalation or data compromise is reported, but it can cause service disruption for the user.
OpenCVE Enrichment