peter bassill · operator
$ cve CVE-2013-7186 JSON

CVE-2013-7186 EXPLOIT

9.3
HIGH · CVSS 2.0 · EPSS 11.6% (pctl 96)

Patch early

A public exploit exists.

Description

Buffer overflow in Steinberg MyMp3PRO 5.0 (Build 5.1.0.21) allows remote attackers to execute arbitrary code via a long string in a .m3u file.

Scoring

CVSS9.3 (HIGH, v2.0)
VectorAV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS11.55% — more likely to be exploited than 96% of all CVEs
WeaknessCWE-119
On CISA KEVno
Public exploityes
Published2013-12-20
Last modified2026-06-17

Affected (1)

VendorProduct
steinbergmymp3pro

Public exploits

References

→ the Explorer  ·  watch your stack  ·  NVD