CVE-2011-5165

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2011-5165
Stack-based buffer overflow in Free MP3 CD Ripper 1.1, 2.6 and earlier, when converting a file, allows user-assisted remote attackers to execute arbitrary code via a crafted .wav file.

9.3 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability : 8.6 / Impact : 10.0

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References
Link Resource
http://secunia.com/advisories/39193 Vendor Advisory
http://www.exploit-db.com/exploits/11975 Exploit
http://www.exploit-db.com/exploits/11976 Exploit
http://www.exploit-db.com/exploits/17727 Exploit
http://www.exploit-db.com/exploits/18142 Exploit
http://www.osvdb.org/63349
http://www.securityfocus.com/bid/39672 Exploit
https://www.exploit-db.com/exploits/36465/ Exploit
https://www.exploit-db.com/exploits/36826/ Exploit
https://www.exploit-db.com/exploits/36827/ Exploit
http://secunia.com/advisories/39193 Vendor Advisory
http://www.exploit-db.com/exploits/11975 Exploit
http://www.exploit-db.com/exploits/11976 Exploit
http://www.exploit-db.com/exploits/17727 Exploit
http://www.exploit-db.com/exploits/18142 Exploit
http://www.osvdb.org/63349
http://www.securityfocus.com/bid/39672 Exploit
https://www.exploit-db.com/exploits/36465/ Exploit
https://www.exploit-db.com/exploits/36826/ Exploit
https://www.exploit-db.com/exploits/36827/ Exploit
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:cleanersoft:free_mp3_cd_ripper:*:*:*:*:*:*:*:*
cpe:2.3:a:cleanersoft:free_mp3_cd_ripper:1.1:*:*:*:*:*:*:*
cpe:2.3:a:cleanersoft:free_mp3_cd_ripper:2.5:*:*:*:*:*:*:*
History

21 Nov 2024, 01:33

Type Values Removed Values Added
References () http://secunia.com/advisories/39193 - Vendor Advisory () http://secunia.com/advisories/39193 - Vendor Advisory
References () http://www.exploit-db.com/exploits/11975 - Exploit () http://www.exploit-db.com/exploits/11975 - Exploit
References () http://www.exploit-db.com/exploits/11976 - Exploit () http://www.exploit-db.com/exploits/11976 - Exploit
References () http://www.exploit-db.com/exploits/17727 - Exploit () http://www.exploit-db.com/exploits/17727 - Exploit
References () http://www.exploit-db.com/exploits/18142 - Exploit () http://www.exploit-db.com/exploits/18142 - Exploit
References () http://www.osvdb.org/63349 - () http://www.osvdb.org/63349 -
References () http://www.securityfocus.com/bid/39672 - Exploit () http://www.securityfocus.com/bid/39672 - Exploit
References () https://www.exploit-db.com/exploits/36465/ - Exploit () https://www.exploit-db.com/exploits/36465/ - Exploit
References () https://www.exploit-db.com/exploits/36826/ - Exploit () https://www.exploit-db.com/exploits/36826/ - Exploit
References () https://www.exploit-db.com/exploits/36827/ - Exploit () https://www.exploit-db.com/exploits/36827/ - Exploit
Information

Published : 2012-09-15 17:55

Updated : 2025-04-11 00:51

NVD link : CVE-2011-5165

Mitre link : CVE-2011-5165

CVE.ORG link : CVE-2011-5165

JSON object : View

Products Affected

cleanersoft

  • free_mp3_cd_ripper
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer