Highly critical security flaw identified in the application

Jan 24, 2007 14:20 GMT  ·  By

Power Audio Editor is an application that allows you to edit your audio files, no matter if it is an MP3, WAV or WMA file. The program is more than a simple audio editor because it enables you to mix any audio file, record your voice or even insert cool effects like chorus, reverb and echo.

The program allows you to work with the entire audio file or with a single part only using an attracting interface, so it seems like Power Audio Editor has all the advantages to become one of the most popular audio editors on the internet. "You can use Power Audio Editor to record your own voice, music or other audio, mix it, edit it, add effects like Chorus, Reverb and Echo, and master it so that you can burn it to a CD, post it on the World Wide Web, or e-mail it," the developers are mentioning in the description of the tool.

Because it is so popular, all its users must know that security company Secunia reported a highly critical flaw that can allow an attacker to control a potential vulnerable system. "Secunia Research has discovered a vulnerability in Power Audio Editor, which can be exploited by malicious people to compromise a user's system," Secunia said. The security firms also mentioned that the application is vulnerable only in the 11.0.1 version but the flaw might also exist in other versions of the audio editor.

Carsten Eiram, Secunia Research, also posted a solution in the security advisory, saying that the best solution is to look for another similar product, although you may try to resolve the issue by setting the kill-bit for the ActiveX control.

Power Audio Editor 11.0.1 was also tested by Softpedia and it is available as a free download on this link.