critical9.3Public exploit code
CVE-2009-3170
Stack-based buffer overflow in AIMP2 Audio Converter 2.53 (build 330) and earlier allows remote attackers to cause a denial of service (crash) or possibly exec…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- AIMP2 Audio Converter 2.53 build 330 - Playlist '.pls' Unicode Buffer Overflow2009-11-21 · local · windows · Verified
- AIMP2 Audio Converter - Playlist Overflow (SEH)2009-11-16 · local · windows · Verified
- AIMP2 Audio Converter 2.53b330 - '.pls' / '.m3u' Unicode Crash (PoC)2009-09-01 · dos · windows · Verified
Impact
Stack-based buffer overflow in AIMP2 Audio Converter 2.53 (build 330) and earlier allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long File1 argument in a (1) .pls or (2) .m3u playlist file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Aimp | Aimp2 Audio Converter | through 2.53 |