CVE-2009-4201 Multiple stack-based buffer overflows in Mp3 Tag Assistant Professional 2.92 build 300 allow remote attackers to execute arbitrary code via an MP3 file with a long string in the (1) ID3v1, (2) ID3v2,....
HighCVSS 9.3
EPSS 4.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple stack-based buffer overflows in Mp3 Tag Assistant Professional 2.92 build 300 allow remote attackers to execute arbitrary code via an MP3 file with a long string in the (1) ID3v1, (2) ID3v2, or (3) APEv2 metadata field.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| assistanttools mp3 tag assistance professional | = 2.92 | No fix listed |
References
- liquidworm.blogspot.com exploit
- 54810 vdb-entry
- 35305 third-party-advisory vendor-advisory
- mp3tagassistant-mp3-bo(50870) vdb-entry