critical9.3Public exploit code
CVE-2009-1944
Stack-based buffer overflow in AIMP 2.51 build 330 allows remote attackers to execute arbitrary code via an MP3 file with a long ID3 tag.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- AIMP 2.51 build 330 - ID3v1/ID3v2 Tag Remote Stack Buffer Overflow (PoC) (SEH)2009-06-01 · dos · windows · Verified
Impact
Stack-based buffer overflow in AIMP 2.51 build 330 allows remote attackers to execute arbitrary code via an MP3 file with a long ID3 tag.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Aimp | Aimp | Version 2.51 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/54812
- http://secunia.com/advisories/35295
- http://zeroscience.org/codes/aimp2_poc.txt
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50875
- https://www.exploit-db.com/exploits/8837
- http://osvdb.org/54812
- http://secunia.com/advisories/35295
- http://zeroscience.org/codes/aimp2_poc.txt
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50875
- https://www.exploit-db.com/exploits/8837