Security flaw identified in the application

Jan 24, 2007 15:30 GMT  ·  By

Audio files are very popular among computer users because almost anybody listens to music while working on the computer or stores sound for certain operations. But, what happens when the format of your audio files doesn't match with your need and you are desperately looking for a solution to convert your files? Well, you should try MP3 WAV Converter, an application that was developed especially for this kind of operation, allowing you to convert audio files from MP3 to WAV and vice versa. The program provides an attracting interface and well-developed functions, so it looks like it represents the best solution for audio converting needs.

Because the application is very popular, you should know that security company Secunia reported a highly critical security flaw in MP3 WAV Converter that can allow an attacker to control a vulnerable computer. "Secunia Research has discovered a vulnerability in MP3 WAV Converter, which can be exploited by malicious people to compromise a user's system," the security firm mentioned. Although Secunia said that MP3 WAV Converter 3.18 is the version affected by the issue, it seems like other releases of the company are also vulnerable.

Carsten Eiram, Secunia Research, also posted the most proper solution for the security flaw that advises you to use another similar product or to try to resolve the issue by setting the kill-bit for the ActiveX control. Probably, the best solution is to wait until the developer of the application released an improved version of MP3 WAV Converter or at least, a patch or a fix to repair the vulnerability.

Under the title "MP3 WAV Converter NCTAudioFile2 ActiveX Control Buffer Overflow", security company Secunia sustains that a successful exploitation of the vulnerability can allow an attacker to control a potential affected system directly from another computer using remote access functions.