What’s Vulnerable › Vulnerabilities

CVE-2006-2465

• Severity: medium (CVSS 5.1 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 5.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2006-05-19 · updated 2026-06-16

Description

Buffer overflow in MP3Info 0.8.4 allows attackers to execute arbitrary code via a long command line argument. NOTE: if mp3info is not installed setuid or setgid in any reasonable context, then this issue might not be a vulnerability.

Affected products

• Mp3Info: 0.8.4

References

• http://osvdb.org/show/osvdb/30945
• http://packetstormsecurity.com/files/124955/Mp3info-Stack-Buffer-Overflow.html
• http://packetstormsecurity.com/files/125786/MP3Info-0.8.5-SEH-Buffer-Overflow.html
• http://securitytracker.com/id?1016108
• http://www.exploit-db.com/exploits/32358
• http://www.securiteam.com/exploits/5GP0E15IKO.html
• http://www.securityfocus.com/bid/18016
• http://osvdb.org/show/osvdb/30945
• http://packetstormsecurity.com/files/124955/Mp3info-Stack-Buffer-Overflow.html
• http://packetstormsecurity.com/files/125786/MP3Info-0.8.5-SEH-Buffer-Overflow.html
• http://securitytracker.com/id?1016108
• http://www.exploit-db.com/exploits/32358

Get alerted when CVE-2006-2465 or the next vulnerability affects your stack