OSVDB ID: 54812 Title: AIMP MP3 ID3 Tag Handling Overflow |
Info |
|
|
Dates |
||||
|
|
Description |
AIMP version 2.51 build 330 suffers from a stack based buffer overflow vulnerability that can be exploited via malicious media file that supports ID3 tags (mp3). EIP and ECX registers gets overwritten, including the SE handler and the pointer to the next SEH record. The issue is trigered by playing the file (crashes within 5 seconds) or by viewing the file's metadata or by pressing the F4 key and selecting the ID3v1 or ID3v2 tab. |
Classification |
Location:
Local / Remote,
Context Dependent
Attack Type: Input Manipulation Impact: Loss of Integrity Exploit: Exploit Public |
Solution |
Currently, there are no known upgrades, patches, or workarounds available to correct this issue. |
Products |
|
References |
|
Credit |
|
gmail.com - Zero Science Lab