CVE-2009-1944

Description

Stack-based buffer overflow in AIMP 2.51 build 330 allows remote attackers to execute arbitrary code via an MP3 file with a long ID3 tag.

Affected products

• aimp / aimp2.51 – 2.51

References

• MISChttp://zeroscience.org/codes/aimp2_poc.txt
• VENDOR_ADVISORYhttp://secunia.com/advisories/35295
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/50875
• MISChttp://osvdb.org/54812
• EXPLOIThttps://www.exploit-db.com/exploits/8837