CVE-2009-0475

Integer underflow in the Huffman decoding functionality (pvmp3_huffman_parsing.cpp) in OpenCORE 2.0 and earlier allows remote attackers to cause a denial of service (process crash) and possibly execute arbitrary code via a crafted MP3 file that triggers heap corruption.

Date published : 2009-02-10

http://www.securityfocus.com/bid/33673

http://www.securityfocus.com/archive/1/500750/100/0/threaded