A critical buffer overflow in Kingdia CD Extractor 3.0.2 enables remote code execution through a malicious registration payload, posing a severe risk of system compromise.

The vulnerability resides in the registration name input field, which lacks adequate bounds checking. An unauthenticated attacker can overwrite the Structured Exception Handler with a malicious payload to gain remote code execution via a bind shell.

A CVSS score of 9.8 reflects the high risk of total system compromise, including unauthorized data access and full remote control by an attacker. This represents a critical threat to the confidentiality, integrity, and availability of any host running the affected software.

Immediate Action: Update Kingdia CD Extractor to the latest version immediately to resolve the vulnerable input handling.

Proactive Monitoring: Review system and application logs for unusual inbound network traffic or attempts to initiate unauthorized shells.

Compensating Controls: Ensure the application is run with the least privilege necessary and utilize Endpoint Detection and Response (EDR) tools to detect suspicious child process spawning.

Public Exploit Available: Not specified

This vulnerability allows for full remote code execution and must be treated with the highest urgency. Organizations should apply the vendor-provided security update immediately and restrict access to the application's configuration interfaces.