CVE-2019-9766

HIGH

Free MP3 CD Ripper 2.6 - Buffer Overflow

Title source: llm
STIX 2.1

Description

Stack-based buffer overflow in Free MP3 CD Ripper 2.6, when converting a file, allows user-assisted remote attackers to execute arbitrary code via a crafted .mp3 file.

Exploits (3)

exploitdb WORKING POC VERIFIED
by Gionathan Reale · pythonlocalwindows_x86
https://www.exploit-db.com/exploits/45403
nomisec WORKING POC 1 stars
by zeronohacker · poc
https://github.com/zeronohacker/CVE-2019-9766
nomisec WORKING POC 1 stars
by moonheadobj · poc
https://github.com/moonheadobj/CVE-2019-9766

Scores

CVSS v3 7.8
EPSS 0.2015
EPSS Percentile 95.5%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-787
Status published
Products (1)
cleanersoft/free_mp3_cd_ripper 2.6
Published Mar 14, 2019
Tracked Since Feb 18, 2026