CVE-2011-0615
Adobe Audition < 3.0.1 - Remote Code Execution via Crafted TRKM Chunk in SES File
Title source: llmDescription
Multiple buffer overflows in Adobe Audition 3.0.1 and earlier allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted data in unspecified fields in the TRKM chunk in an Audition Session (aka .ses) file, related to inconsistent use of character data types.
References (3)
Core 3
Core References
Exploit x_refsource_misc
http://www.coresecurity.com/content/Adobe-Audition-malformed-SES-file
Exploit vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/47838
Vendor Advisory x_refsource_confirm
http://www.adobe.com/support/security/bulletins/apsb11-10.html
Scores
EPSS
0.0696
EPSS Percentile
93.4%
Details
CWE
CWE-119
Status
published
Products (2)
adobe/audition
3.0
adobe/audition
< 3.0.1
Published
May 16, 2011
Tracked Since
Feb 18, 2026