A vulnerability has been discovered in various MultiMedia Soft components for .NET, which potentially can be exploited by malicious people to compromise an application using these components.

The vulnerability is caused due to a boundary error within AdjMmsEng.dll when processing *.pls playlist files. This can be exploited to cause a stack-based buffer overflow by e.g. tricking a user into opening a specially crafted *.pls playlist file.

The vulnerability is confirmed in version 7.11.1.0 and 7.11.2.7 of the AdjMmsEng.dll file. Other versions may also be vulnerable.

Reportedly, only the following components are affected:
* Audio DJ Studio for .NET
* Audio Sound Suite for .NET

Solution
The vendor has released fixed versions containing AdjMmsEng.dll version 7.11.2.10.

Provided and/or discovered by
Reported by h4ck3r#47 as a vulnerability in Euphonics Audio Player.

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://milw0rm.com/exploits/7958

Deep Links
Links available to Secunia VIM customers