Vulnerability Details CVE-2009-3811
Stack-based buffer overflow in Music Tag Editor 1.61 build 212 allows remote attackers to execute arbitrary code via an MP3 file with a long ID3 tag. NOTE: some of these details are obtained from third party information.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.232
EPSS Ranking 96.0%
CVSS Severity
CVSS v2 Score 9.3
References
- http://liquidworm.blogspot.com/2009/07/music-tag-editor-161-build-212-remote.html
- http://osvdb.org/55861
- http://secunia.com/advisories/35828
- http://www.exploit-db.com/exploits/9167
- https://exchange.xforce.ibmcloud.com/vulnerabilities/51724
- http://liquidworm.blogspot.com/2009/07/music-tag-editor-161-build-212-remote.html
- http://osvdb.org/55861
- http://secunia.com/advisories/35828
- http://www.exploit-db.com/exploits/9167
- https://exchange.xforce.ibmcloud.com/vulnerabilities/51724
Products affected by CVE-2009-3811
-
cpe:2.3:a:assistanttools:music_tag_editor:1.61