PT-2012-2142 · Koyote Soft · Free Mp3 Cd Ripper

Naxxo · Published 2012-09-15 · Updated 2016-06-15 · CVE-2011-5165

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Free MP3 CD Ripper versions 1.1, 2.6 and earlier

Description The issue is a stack-based buffer overflow that occurs when converting a file, allowing user-assisted remote attackers to execute arbitrary code via a crafted .wav file.

Recommendations For Free MP3 CD Ripper versions 1.1, 2.6 and earlier, avoid using the file conversion feature with untrusted .wav files until a patch is available. As a temporary workaround, consider restricting the use of the file conversion feature to minimize the risk of exploitation.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2011-5165

Affected Products

Free Mp3 Cd Ripper

References · 17

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/free_mp3_ripper_wav.rb · Exploit
• 🔥 https://exploit-db.com/exploits/36827 · Exploit
• 🔥 http://exploit-db.com/exploits/11976 · Exploit
• 🔥 https://exploit-db.com/exploits/36826 · Exploit
• 🔥 https://exploit-db.com/exploits/11975 · Exploit
• 🔥 https://exploit-db.com/exploits/36465 · Exploit
• 🔥 https://exploit-db.com/exploits/18142 · Exploit
• 🔥 http://securityfocus.com/bid/39672 · Exploit
• 🔥 https://exploit-db.com/exploits/17727 · Exploit
• 🔥 https://exploit-db.com/exploits/12012 · Exploit
• 🔥 http://exploit-db.com/exploits/18142 · Exploit
• 🔥 http://exploit-db.com/exploits/11975 · Exploit
• 🔥 https://exploit-db.com/exploits/11976 · Exploit
• 🔥 http://exploit-db.com/exploits/17727 · Exploit
• http://secunia.com/advisories/39193 · Vendor Advisory