Poikosoft EZ CD Audio Converter Activation denial of service

published 2024-01-25 2 y ago modified 2026-06-17 4 mo ago also EUVD-2024-16668

cvss: 3.3; version 3.1, CNA
cisa kev: Not listed; not in CISA's catalog
epss: 0.4%; EPSS 0.4% chance of exploitation in 30 days, percentile 32%
public exploits: 0; none known

A vulnerability classified as problematic was found in Poikosoft EZ CD Audio Converter 8.0.7. Affected by this vulnerability is an unknown functionality of the component Activation Handler. The manipulation of the argument Key leads to denial of service. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The identifier VDB-252037 was assigned to this vulnerability.

CISA SSVC

Exploitation: Proof of concept is public
Automatable: no
Technical impact: partial
Assessed: 2 y ago (2024-09-12)

Exploit prediction

0.38% chance of exploitation in the next 30 days, higher than 32% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

fitoxs.com https://fitoxs.com/vuldb/09-exploit-perl.txt referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by	version	score	vector
CNA	3.1	3.3	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CNA	3.0	3.3	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CNA	2.0	1.7	AV:L/AC:L/Au:S/C:N/I:N/A:P
NVD	3.1	5.5	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Poikosoft EZ CD Audio Converter

Classification

Weakness

CWE-404 Improper Resource Shutdown or Release

References

fitoxs.com /vuldb/09-exploit-perl.txt
exploit, third-party-advisory
vuldb.com /?id.252037
vdb-entry, technical-description, third-party-advisory
vuldb.com /?ctiid.252037
signature, permissions-required, third-party-advisory

Sources

CVE List CVE-2024-0886
NVD CVE-2024-0886

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary