CVE-2011-5043 TomatoSoft Free Mp3 Player 1.0 allows remote attackers to cause a denial of service (application crash) via a long string in an MP3 file, possibly a buffer overflow.
MediumCVSS 4.3
EPSS 1.9%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
TomatoSoft Free Mp3 Player 1.0 allows remote attackers to cause a denial of service (application crash) via a long string in an MP3 file, possibly a buffer overflow.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tomatosoft free mp3 player | = 1.0 | No fix listed |
References
- 18254 exploit
- freemp3-mp3-dos(71870) vdb-entry