CVE-2011-5165
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
8.2 High
AI Score
Confidence
High
0.474 Medium
EPSS
Percentile
97.5%
Stack-based buffer overflow in Free MP3 CD Ripper 1.1, 2.6 and earlier, when converting a file, allows user-assisted remote attackers to execute arbitrary code via a crafted .wav file.
Affected configurations
References
secunia.com/advisories/39193
www.exploit-db.com/exploits/11975
www.exploit-db.com/exploits/11976
www.exploit-db.com/exploits/17727
www.exploit-db.com/exploits/18142
www.osvdb.org/63349
www.securityfocus.com/bid/39672
www.exploit-db.com/exploits/36465/
www.exploit-db.com/exploits/36826/
www.exploit-db.com/exploits/36827/
Related
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
8.2 High
AI Score
Confidence
High
0.474 Medium
EPSS
Percentile
97.5%