CVE-2021-47785

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2021-47785
Ether MP3 CD Burner 1.3.8 contains a buffer overflow vulnerability in the registration name field that allows remote code execution. Attackers can craft a malicious payload to overwrite SEH handlers and execute a bind shell on port 3110 by exploiting improper input validation.

9.8 /10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://download.cnet.com/mp3avimpegwmvrm-to-audio-cd-burner/3000-2646_4-10658515.html Product
https://www.exploit-db.com/exploits/50332 Exploit Third Party Advisory
https://www.vulncheck.com/advisories/ethermpcdburner-buffer-overflow-seh Third Party Advisory
https://www.exploit-db.com/exploits/50332 Exploit Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:ethersoftware:ether_mp3_cd_burner:1.3.8:*:*:*:*:*:*:*
History

17 Jun 2026, 04:18

Type Values Removed Values Added
Summary
  • (es) Ether MP3 CD Burner 1.3.8 contiene una vulnerabilidad de desbordamiento de búfer en el campo de nombre de registro que permite la ejecución remota de código. Los atacantes pueden crear una carga útil maliciosa para sobrescribir los manejadores SEH y ejecutar un bind shell en el puerto 3110 explotando una validación de entrada incorrecta.

09 Feb 2026, 14:39

Type Values Removed Values Added
CPE cpe:2.3:a:ethersoftware:ether_mp3_cd_burner:1.3.8:*:*:*:*:*:*:*
References () https://download.cnet.com/mp3avimpegwmvrm-to-audio-cd-burner/3000-2646_4-10658515.html - () https://download.cnet.com/mp3avimpegwmvrm-to-audio-cd-burner/3000-2646_4-10658515.html - Product
References () https://www.exploit-db.com/exploits/50332 - () https://www.exploit-db.com/exploits/50332 - Exploit, Third Party Advisory
References () https://www.vulncheck.com/advisories/ethermpcdburner-buffer-overflow-seh - () https://www.vulncheck.com/advisories/ethermpcdburner-buffer-overflow-seh - Third Party Advisory
First Time Ethersoftware
Ethersoftware ether Mp3 Cd Burner

16 Jan 2026, 22:16

Type Values Removed Values Added
References () https://www.exploit-db.com/exploits/50332 - () https://www.exploit-db.com/exploits/50332 -

16 Jan 2026, 00:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-01-16 00:16

Updated : 2026-06-17 04:18

NVD link : CVE-2021-47785

Mitre link : CVE-2021-47785

CVE.ORG link : CVE-2021-47785

JSON object : View

Products Affected

ethersoftware

  • ether_mp3_cd_burner
CWE
CWE-787

Out-of-bounds Write