CVE-2009-3170

Description

Stack-based buffer overflow in AIMP2 Audio Converter 2.53 (build 330) and earlier allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long File1 argument in a (1) .pls or (2) .m3u playlist file.

Affected products

• aimp / aimp2_audio_converter2.53

References

• VENDOR_ADVISORYhttp://secunia.com/advisories/35295
• VENDOR_ADVISORYhttp://www.vupen.com/english/advisories/2009/2530
• EXPLOIThttp://www.exploit-db.com/exploits/9561