What is the CVSS score of CVE-2021-47785?

CVE-2021-47785 has a CVSS 3.1 base score of 9.8 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of DNS are affected by CVE-2021-47785?

Organizations using Ether MP3 CD Burner 1.3.8 face critical risk from CVE-2021-47785, a out-of-bounds write vulnerability rated CVSS 9.8.

Is there a public PoC exploit available for CVE-2021-47785?

Yes, a public proof-of-concept exploit is available for CVE-2021-47785. Prioritise patching immediately. EPSS: 0.1%.

How to fix or mitigate CVE-2021-47785?

Within 24 hours: Identify all affected systems and apply vendor patches immediately. If patching is delayed, consider network segmentation to limit exposure.

DNS CVE-2021-47785

CRITICAL

Out-of-bounds Write (CWE-787)

2026-01-16 disclosure@vulncheck.com

RCE Buffer Overflow DNS Ether Mp3 Cd Burner

9.8

CVSS 3.1

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:54 vuln.today

PoC Detected

Feb 09, 2026 - 14:39 vuln.today

Public exploit code

CVE Published

Jan 16, 2026 - 00:16 nvd

CRITICAL 9.8

DescriptionNVD

Ether MP3 CD Burner 1.3.8 contains a buffer overflow vulnerability in the registration name field that allows remote code execution. Attackers can craft a malicious payload to overwrite SEH handlers and execute a bind shell on port 3110 by exploiting improper input validation.

AnalysisAI

Ether MP3 CD Burner 1.3.8 has buffer overflow in registration enabling bind shell on port 3110 via SEH overwrite. PoC available.

Technical ContextAI

Registration name overflows SEH handlers (CWE-787).

RemediationAI

Avoid this software.

CVE-2021-47785 vulnerability details – vuln.today

Back

DNS CVE-2021-47785

CVSS VectorNVD

Lifecycle Timeline

DescriptionNVD

AnalysisAI

Technical ContextAI

RemediationAI

Share

External POC / Exploit Code