Goal Reached Thanks to every supporter β€” we hit 100%!

Goal: 1000 CNY Β· Raised: 1000 CNY

100.0%

CVE-2021-47774 β€” AI Deep Analysis Summary

CVSS 9.8 Β· Critical

Q1What is this vulnerability? (Essence + Consequences)

🚨 **Essence**: Buffer Overflow in Kingdia CD Extractor v3.0.2. πŸ’₯ **Consequences**: Arbitrary Code Execution. The 'Name' registration field is vulnerable, allowing attackers to crash the app or take full control.

Q2Root Cause? (CWE/Flaw)

πŸ›‘οΈ **CWE-787**: Out-of-bounds Write. πŸ› **Flaw**: The software fails to validate the length of the input string in the registration name field, leading to memory corruption.

Q3Who is affected? (Versions/Components)

πŸ“¦ **Product**: Kingdia CD Extractor. πŸ“‰ **Version**: Specifically **v3.0.2**. 🏒 **Vendor**: Kingdia (En). If you use this specific audio converter, you are at risk.

Q4What can hackers do? (Privileges/Data)

πŸ”“ **Privileges**: Full System Control. πŸ’Ύ **Data**: Complete Compromise. Since it allows arbitrary code execution, hackers can install malware, steal data, or use your machine as a botnet node.

Q5Is exploitation threshold high? (Auth/Config)

⚑ **Threshold**: LOW. 🚫 **Auth**: None required. πŸ–±οΈ **UI**: None required. The CVSS vector shows AV:N/AC:L/PR:N/UI:N/S:U. It is easily exploitable remotely without user interaction.

Q6Is there a public Exp? (PoC/Wild Exploitation)

πŸ’£ **Exploit**: YES. πŸ“‚ **Source**: ExploitDB #50470. ⚠️ **Status**: Publicly available. Wild exploitation is possible since the PoC is out there.

Q7How to self-check? (Features/Scanning)

πŸ” **Check**: Scan for 'Kingdia CD Extractor' v3.0.2. πŸ“‹ **Feature**: Look for the registration dialog.…

Q8Is it fixed officially? (Patch/Mitigation)

🩹 **Patch**: Data indicates published date 2026-01-15, suggesting it is a recent or future-dated entry in this dataset. πŸ“₯ **Action**: Check the official download page for updates > v3.0.2 immediately.

Q9What if no patch? (Workaround)

🚫 **Workaround**: **Uninstall** Kingdia CD Extractor v3.0.2. πŸ”„ **Alternative**: Use a different, reputable audio conversion tool. Do not register or input data until patched.

Q10Is it urgent? (Priority Suggestion)

πŸ”΄ **Priority**: CRITICAL. πŸš€ **Urgency**: HIGH. CVSS Score is likely 9.8 (Critical). With public exploits and no auth required, patch or remove immediately to prevent compromise.