CVE-2021-47785
Published: 16 January 2026
Summary
CVE-2021-47785 is a high-severity Out-of-bounds Write (CWE-787) vulnerability in Ethersoftware Ether Mp3 Cd Burner. Its CVSS base score is 7.0 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploitation for Client Execution (T1203); ranked in the top 47.6% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
The strongest mitigations our analysis identified are NIST 800-53 SI-10 (Information Input Validation) and SI-16 (Memory Protection).
Deeper analysis
Ether MP3 CD Burner 1.3.8 is affected by CVE-2021-47785, a buffer overflow vulnerability in the registration name field stemming from improper input validation (CWE-787). This flaw allows attackers to craft a malicious payload that overwrites Structured Exception Handler (SEH) handlers, enabling remote code execution. The vulnerability was published on 2026-01-16 and carries a CVSS v3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), indicating critical severity due to its high impact on confidentiality, integrity, and availability.
Remote attackers can exploit this vulnerability over the network without authentication, privileges, or user interaction, requiring only low complexity. Successful exploitation allows full remote code execution, such as launching a bind shell on TCP port 3110, granting attackers complete control over the affected system.
Advisories and related resources, including a proof-of-concept exploit on Exploit-DB (ID 50332) and a Vulncheck advisory detailing the SEH buffer overflow, are available at the following references: https://download.cnet.com/mp3avimpegwmvrm-to-audio-cd-burner/3000-2646_4-10658515.html, https://www.exploit-db.com/exploits/50332, and https://www.vulncheck.com/advisories/ethermpcdburner-buffer-overflow-seh. No patches or specific mitigations are detailed in the provided information.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2026-3044
Vulnerability details
Ether MP3 CD Burner 1.3.8 contains a buffer overflow vulnerability in the registration name field that allows remote code execution. Attackers can craft a malicious payload to overwrite SEH handlers and execute a bind shell on port 3110 by exploiting…
more
improper input validation.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Buffer overflow with SEH overwrite directly enables unauthenticated remote code execution in the client application (CWE-787).
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Directly addresses the root cause of the buffer overflow by enforcing validation of information inputs such as the registration name field to prevent overflows from improper input handling.
Implements memory protections like DEP and ASLR that mitigate exploitation of buffer overflows, including SEH handler overwrites leading to remote code execution.
Requires identification, reporting, and correction of flaws like CVE-2021-47785 through patching, updating, or removal of the vulnerable Ether MP3 CD Burner software.