CVE-2021-47774
BaseFortify
Publication date: 2026-01-15
Last updated on: 2026-01-15
Assigner: VulnCheck
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| kingdia | cd_extractor | From 3.7.12 (exc) |
| kingdia | cd_extractor | 3.7 |
| kingdia | cd_extractor | 3.6.17 |
| kingdia | cd_extractor | 3.5 |
| kingdia | cd_extractor | 3.0.0 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-787 | The product writes data past the end, or before the beginning, of the intended buffer. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a buffer overflow in Kingdia CD Extractor 3.0.2's registration name field. Attackers can input a specially crafted payload exceeding 256 bytes that overwrites the Structured Exception Handler (SEH). This allows them to execute arbitrary code by redirecting the program's execution flow, potentially opening a bind shell on the affected machine. [2]
How can this vulnerability impact me? :
The vulnerability can allow an attacker to execute arbitrary code on your system with the privileges of the Kingdia CD Extractor application. Specifically, it can open a bind shell on TCP port 3110, enabling remote command execution. This could lead to unauthorized access, local privilege escalation, or control over your machine. [2]
How can this vulnerability be detected on my network or system? Can you suggest some commands?
This vulnerability can be detected by monitoring for unusual activity such as a bind shell opening on TCP port 3110, which is used by the exploit. You can check for listening services on this port using commands like 'netstat -an | findstr 3110' on Windows or 'netstat -an | grep 3110' on Linux systems. Additionally, inspecting the registration name field input for unusually long strings (exceeding 256 bytes) in Kingdia CD Extractor may indicate an attempted exploit. [2]
What immediate steps should I take to mitigate this vulnerability?
Immediate mitigation steps include avoiding the use of Kingdia CD Extractor version 3.0.2 or restricting access to the application to trusted users only. Do not paste or accept registration names longer than 256 bytes. Monitor and block inbound and outbound traffic on TCP port 3110 to prevent bind shell connections. Applying any available updates or patches from the vendor (if available) or upgrading to a newer, fixed version is recommended. [2]