Some vulnerabilities have been discovered in various MultiMedia Soft components for .NET, which potentially can be exploited by malicious people to compromise an application using these components.

1) A boundary error exists within AdjMmsEng.dll when processing PLS files, which can be exploited to cause a stack-based buffer overflow by tricking a user into opening a specially crafted PLS file in an application using the component.

2) Another boundary error exists within AdjMmsEng.dll when processing PLS files, which can be exploited to cause a stack-based buffer overflow by tricking a user into opening a specially crafted PLS file in an application using the component.

The vulnerabilities are confirmed in Audio DJ Studio for .NET version 4.5 and Audio Sound Suite for .NET 2010 (both containing AdjMmsEng.dll version 8.2.0.5). Other versions and the 64bit version may also be affected.

Solution
Update to a version released after 2010-09-23 containing AdjMmsEng.dll 8.2.1.0 or later.

Provided and/or discovered by
1) Reported as a vulnerability in DJ Studio Pro by Abhishek Lyall
2) Lord Winder

Changelog
Further details available in Customer Area

Deep Links
Links available in Customer Area