SOUND4 LinkAndShare Transmitter 1.1.2 Format String & Stack Buffer Overflow (CVE-2023-53966)

Key Information Vulnerability Title: SOUND4 LinkAndShare Transmitter 1.1.2 Format String Stack Buffer Overflow Advisory ID: ZSL-2023-5744 Type: Local Impact: System Access, Denial of Service, System Information Disclosure Risk: 4/5 Release Date: 08.02.2023 Overview SOUND4 Link&Share (L&S) is a simple open protocol that allows users to remotely control SOUND4 processors over a network. SOUND4 provides a tool called Link&Share Transmitter for managing and sending L&S commands to the processor. Description The application is vulnerable to a format string memory leak and stack buffer overflow due to improper sanitization of user-supplied input when calling the function in the MSVCR120 DLL. This leads to stack overflow and disclosure of sensitive information. Attackers can exploit the username environment variable to trigger the vulnerability and potentially execute code on the affected system. Vulnerability Recheck Output Example (4224.59e8): Security check failure or stack buffer overflow - code c0000409 (!!! SECOND CHANCE !!!) eax=00000001 ebx=00000000 ecx=00000005 edx=000001e9 esi=0119f36f edi=00000000 eip=645046b1 esp=0119f0b8 ebp=0119f0d0 iopl=0 nv up ei pl nz na po nc cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00000202 MSVCR120!invoke_watson+0xe: 645046b1 cd29 int 29h Vendor SOUND4 Ltd. - https://www.sound4.com Affected Versions 1.1.2 Test Environment Microsoft Windows 10 Home Vendor Status [26.09.2022] Vulnerability discovered. [30.09.2022] Contacted vendor. [07.02.2023] No response from vendor. [08.02.2023] Public security advisory released. Evidence sound4_fmt_linkandshare.txt Acknowledgments Vulnerability discovered by Gjoko Krstic - gnoko@zeroscience.mk References [1] https://packetstormsecurity.com/files/170945/SOUND4-LinkAndShare-Transmitter-1.1.2-Format-String-Stack-Buffer-Overflow.html [2] https://cxsecurity.com/issue/WLB-2023020023 [3] https://exchange.xforce.ibmcloud.com/vulnerabilities/248308 [4] https://www.exploit-db.com/exploits/51259 [5] http://www.cve.org/CVERecord?id=CVE-2023-53966 [6] https://www.vulncheck.com/advisories/sound-linkandshare-transmitter-format-string-stack-buffer-overflow Change Log [08.02.2023] - Initial release [10.02.2023] - Added reference [1] [15.02.2023] - Added reference [2] [20.04.2023] - Added references [3] and [4] [24.12.2025] - Added references [5] and [6]

Goal Reached Thanks to every supporter — we hit 100%!

SOUND4 LinkAndShare Transmitter 1.1.2 Format String & Stack Buffer Overflow (CVE-2023-53966)