critical9.3Public exploit code
CVE-2009-3811
Stack-based buffer overflow in Music Tag Editor 1.61 build 212 allows remote attackers to execute arbitrary code via an MP3 file with a long ID3 tag.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Music Tag Editor 1.61 build 212 - Remote Buffer Overflow (PoC)2009-07-16 · dos · windows · Verified
Impact
Stack-based buffer overflow in Music Tag Editor 1.61 build 212 allows remote attackers to execute arbitrary code via an MP3 file with a long ID3 tag. NOTE: some of these details are obtained from third party information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Assistanttools | Music Tag Editor | Version 1.61 |
Weakness classification
References
- NVD record
- CVE.org record
- http://liquidworm.blogspot.com/2009/07/music-tag-editor-161-build-212-remote.html
- http://osvdb.org/55861
- http://secunia.com/advisories/35828
- http://www.exploit-db.com/exploits/9167
- https://exchange.xforce.ibmcloud.com/vulnerabilities/51724
- http://liquidworm.blogspot.com/2009/07/music-tag-editor-161-build-212-remote.html
- http://osvdb.org/55861
- http://secunia.com/advisories/35828
- http://www.exploit-db.com/exploits/9167
- https://exchange.xforce.ibmcloud.com/vulnerabilities/51724