Unrated severityNVD Advisory· Published Dec 4, 2009· Updated Apr 23, 2026

CVE-2009-4201

Description

Multiple stack-based buffer overflows in Mp3 Tag Assistant Professional 2.92 build 300 allow remote attackers to execute arbitrary code via an MP3 file with a long string in the (1) ID3v1, (2) ID3v2, or (3) APEv2 metadata field.

Affected products

Assistanttools/Mp3 Tag Assistance Professional
cpe:2.3:a:assistanttools:mp3_tag_assistance_professional:2.92:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

liquidworm.blogspot.com/2009/05/mp3-tag-assistant-pro-292-tag-metadata.htmlnvdExploit
secunia.com/advisories/35305nvdVendor Advisory
osvdb.org/54810nvd
exchange.xforce.ibmcloud.com/vulnerabilities/50870nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.004
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000