CVE-2011-5165 Stack-based buffer overflow in Free MP3 CD Ripper 1.1, 2.6 and earlier, when converting a file, allows user-assisted remote attackers to execute arbitrary code via a crafted .wav file.
HighCVSS 9.3
EPSS 37.0%
Framework module
Public exploit
PoC
- Published
- Updated
- Exploit status
- Public exploit available
Description
Stack-based buffer overflow in Free MP3 CD Ripper 1.1, 2.6 and earlier, when converting a file, allows user-assisted remote attackers to execute arbitrary code via a crafted .wav file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cleanersoft free mp3 cd ripper | <= 2.6 | No fix listed |
| cleanersoft free mp3 cd ripper | = 1.1 | No fix listed |
| cleanersoft free mp3 cd ripper | = 2.5 | No fix listed |