CVE-2019-25571mediumCWE-226

CVE-2019-25571: falha de média gravidade em MediaMonkey

MediaMonkey 4.1.23 Denial of Service via Malformed URL

Publicada em 21 mar 2026 · Atualizada em 23 mar 2026

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.9epss 0.2%

MediaMonkey 4.1.23 contains a denial of service vulnerability that allows local attackers to crash the application by opening a specially crafted MP3 file containing an excessively long URL string. Attackers can create a malicious MP3 file with a buffer containing 4000 bytes of data appended to a URL, which causes the application to crash when the file is opened through the File > Open URL dialog.

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Produtos afetados

Mediamonkey · MediaMonkey

Referências

https://www.exploit-db.com/exploits/46378 https://www.mediamonkey.com/https://www.mediamonkey.com/sw/MediaMonkey_4.1.23.1881.exe https://www.vulncheck.com/advisories/mediamonkey-denial-of-service-via-malformed-url