CVE-2009-4201: Assistanttools MP3 Tag Assistance Professional

High severity, CVSS 9.3. EPSS: 4.8% chance of exploitation in the next 30 days.

Multiple stack-based buffer overflows in Mp3 Tag Assistant Professional 2.92 build 300 allow remote attackers to execute arbitrary code via an MP3 file with a long string in the (1) ID3v1, (2) ID3v2, or (3) APEv2 metadata field.

Affected products

Published 2009-12-04. Last modified 2026-06-16.