CentOS 6.5
wget https://github.com/mudongliang/source-packages/raw/master/CVE-2006-2465/mp3info-0.8.5a.tgz
tar -xvf mp3info-0.8.5a.tgz
cd mp3info-0.8.5a
make
perl poc.pl
Note: poc.pl should be in the same folder with "mp3info"
MP3Info Unspecified Buffer Overflow Vulnerability
MP3Info 0.8.5a - Local Buffer Overflow (SEH)
Buffer overflow in MP3Info 0.8.4 allows attackers to execute arbitrary code via a long command line argument.
185 if ( !( fp=fopen(argv[i],"rb") ) ) {
186 sprintf(error_msg,"Error opening MP3: %s",argv[i]);
187 perror(error_msg);
....