CVE-2011-5165

CRITICAL 9.3CVE-2011-5165 · Published 15/09/2012 · updated 16/06/2026

Package	Affected versions	Patched versions
free mp3 cd ripper cleanersoft	`= 1.1= 2.5≤ 2.6`	No fix yet

Description

Stack-based buffer overflow in Free MP3 CD Ripper 1.1, 2.6 and earlier, when converting a file, allows user-assisted remote attackers to execute arbitrary code via a crafted .wav file.

References

secunia.com/advisories/39193 · Vendor Advisory
exploit-db.com/exploits/11975 · Exploit
exploit-db.com/exploits/11976 · Exploit
exploit-db.com/exploits/17727 · Exploit
exploit-db.com/exploits/18142 · Exploit
osvdb.org/63349
securityfocus.com/bid/39672 · Exploit
exploit-db.com/exploits/36465 · Exploit
exploit-db.com/exploits/36826 · Exploit
exploit-db.com/exploits/36827 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free