NetSight
IP …
medium5.1Public exploit code

CVE-2006-2465

Buffer overflow in MP3Info 0.8.4 allows attackers to execute arbitrary code via a long command line argument.

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Buffer overflow in MP3Info 0.8.4 allows attackers to execute arbitrary code via a long command line argument. NOTE: if mp3info is not installed setuid or setgid in any reasonable context, then this issue might not be a vulnerability.

Affected products

VendorProductAffected versions
Mp3infoMp3info
Version 0.8.4

References