Lucene search
HistoryOct 27, 2009 - 4:30 p.m.
CVE-2009-3811
music tag editor
cve-2009-3811
buffer overflow
remote code execution
mp3
id3 tag
security vulnerability
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
8.1 High
AI Score
Confidence
High
0.109 Low
EPSS
Percentile
95.1%
Stack-based buffer overflow in Music Tag Editor 1.61 build 212 allows remote attackers to execute arbitrary code via an MP3 file with a long ID3 tag. NOTE: some of these details are obtained from third party information.
Affected configurations
Node
assistanttoolsmusic_tag_editorMatch1.61
| CPE | Name | Operator | Version |
|---|---|---|---|
| assistanttools:music_tag_editor | assistanttools music tag editor | eq | 1.61 |
Related
prion
prion
Stack overflow
2009-10-27 16:30:00
nvd
nvd
CVE-2009-3811
2009-10-27 16:30:00
zeroscience
zeroscience
Music Tag Editor 1.61 build 212 Remote Buffer Overflow PoC
2009-07-16 00:00:00
cvelist
cvelist
CVE-2009-3811
2009-10-27 16:00:00
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
8.1 High
AI Score
Confidence
High
0.109 Low
EPSS
Percentile
95.1%
Related for CVE-2009-3811