Gjoko Krstic has discovered a vulnerability in Music Tag Editor, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to a boundary error in the processing of MP3 files. This can be exploited to cause a stack-based buffer overflow via an MP3 file having an overly long ID3 tag.

Successful exploitation may allow execution of arbitrary code.

The vulnerability is confirmed in version 1.61 build 212. Other versions may also be affected.

Solution
Do not process untrusted MP3 files with the application.

Provided and/or discovered by
Gjoko 'LiquidWorm' Krstic

Changelog
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers