Secunia

varunuppal has discovered a vulnerability in FL Studio, which potentially can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to a boundary error when processing a malformed FLP file. This can be exploited to cause a heap-based buffer overflow and can potentially allow arbitrary code execution.

Successful exploitation requires that the user is e.g. tricked into opening a malicious FLP file.

The vulnerability has been confirmed in version 5.0.2, and also reported in version 5.0.1. Other versions may also be affected.

Solution
Restrict use to only trusted FLP files.

Provided and/or discovered by
varunuppal

Changelog
Further details available in Customer Area

Deep Links
Links available in Customer Area