The host is installed with Adobe Audition and is prone to multiple buffer overflow vulnerabilities.

Successful exploitation could allow attackers to execute arbitrary code or cause a denial of service via crafted data in unspecified fields in the TRKM chunk in an Audition Session file. Impact Level: Application

Upgrade to version CS5.5 or higher, For updates refer to http://www.adobe.com/products/audition.html

The flaw is due to an error when handling '.SES' (session) format file, which results in memory corruption, application crash or possibly execute arbitrary code.

Adobe Audition version 3.0.1 and earlier on Windows

• http://www.adobe.com/support/security/bulletins/apsb11-10.html
• http://www.coresecurity.com/content/Adobe-Audition-malformed-SES-file
• http://www.exploit-db.com/exploits/17278/
• http://www.zeroscience.mk/en/vulnerabilities/ZSL-2011-5012.php

---

Updated on 2015-03-25