Lucene search

K
cve[email protected]CVE-2009-1944
HistoryJun 05, 2009 - 9:30 p.m.

CVE-2009-1944

2009-06-0521:30:00
CWE-119
web.nvd.nist.gov
34
4
cve-2009-1944
aimp
buffer overflow
remote code execution
mp3
id3 tag
security vulnerability

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.3 High

AI Score

Confidence

High

0.109 Low

EPSS

Percentile

95.2%

Stack-based buffer overflow in AIMP 2.51 build 330 allows remote attackers to execute arbitrary code via an MP3 file with a long ID3 tag.

Affected configurations

NVD
Node
aimpaimpMatch2.51
CPENameOperatorVersion
aimp:aimpaimpeq2.51

Social References

More

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.3 High

AI Score

Confidence

High

0.109 Low

EPSS

Percentile

95.2%