n00b has discovered a vulnerability in Magic ISO Maker, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to an error within the parsing of .CUE files and can be exploited to corrupt memory via a specially crafted .CUE file with an overly long "FILE" string.

Successful exploitation may allow execution of arbitrary code when a user opens a malicious .CUE file.

The vulnerability is confirmed in version 5.4. Other versions may also be affected.

Solution
Do not open untrusted .CUE files.

Provided and/or discovered by
n00b

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://milw0rm.com/exploits/3945

Deep Links
Links available to Secunia VIM customers