CVE-2008-3877

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 9.9% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2008-09-02 · updated 2026-06-16
Weakness: CWE-119

Description

Stack-based buffer overflow in Acoustica Mixcraft 4.1 Build 96 and 4.2 Build 98 allows user-assisted attackers to execute arbitrary code via a crafted .mx4 file. NOTE: it was later reported that version 3 is also affected.

Affected products

Acoustica Mixcraft: 3.0, 4.1, 4.2

References

http://secunia.com/advisories/31595
http://securityreason.com/securityalert/4199
http://www.securityfocus.com/bid/30879
http://www.securityfocus.com/bid/33012
https://exchange.xforce.ibmcloud.com/vulnerabilities/44751
https://www.exploit-db.com/exploits/6322
https://www.exploit-db.com/exploits/7577
http://secunia.com/advisories/31595
http://securityreason.com/securityalert/4199
http://www.securityfocus.com/bid/30879
http://www.securityfocus.com/bid/33012
https://exchange.xforce.ibmcloud.com/vulnerabilities/44751

Get alerted when CVE-2008-3877 or the next vulnerability affects your stack