Vulnerability Details CVE-2011-5165
Stack-based buffer overflow in Free MP3 CD Ripper 1.1, 2.6 and earlier, when converting a file, allows user-assisted remote attackers to execute arbitrary code via a crafted .wav file.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.764
EPSS Ranking 98.9%
CVSS Severity
CVSS v2 Score 9.3
References
- http://secunia.com/advisories/39193
- http://www.exploit-db.com/exploits/11975
- http://www.exploit-db.com/exploits/11976
- http://www.exploit-db.com/exploits/17727
- http://www.exploit-db.com/exploits/18142
- http://www.osvdb.org/63349
- http://www.securityfocus.com/bid/39672
- https://www.exploit-db.com/exploits/36465/
- https://www.exploit-db.com/exploits/36826/
- https://www.exploit-db.com/exploits/36827/
- http://secunia.com/advisories/39193
- http://www.exploit-db.com/exploits/11975
- http://www.exploit-db.com/exploits/11976
- http://www.exploit-db.com/exploits/17727
- http://www.exploit-db.com/exploits/18142
- http://www.osvdb.org/63349
- http://www.securityfocus.com/bid/39672
- https://www.exploit-db.com/exploits/36465/
- https://www.exploit-db.com/exploits/36826/
- https://www.exploit-db.com/exploits/36827/
Products affected by CVE-2011-5165
-
cpe:2.3:a:cleanersoft:free_mp3_cd_ripper:*
-
cpe:2.3:a:cleanersoft:free_mp3_cd_ripper:1.1
-
cpe:2.3:a:cleanersoft:free_mp3_cd_ripper:2.5