CVE-2014-9448

CVE-2014-9448 describes a buffer overflow vulnerability in Mini-stream RM-MP3 Converter version 3.1.2.1.2010.03.30. This flaw allows remote attackers to execute arbitrary code or cause a denial of service by providing a specially crafted WAX file containing an overly long string. With a CVSS score of 7.5, this vulnerability is considered highly severe, requiring no authentication and low attack complexity, potentially leading to full compromise of confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, multiple proof-of-concept exploits are publicly available on ExploitDB, demonstrating both denial of service and local buffer overflow scenarios. Despite exploit availability, there is no evidence of active exploitation, and it has garnered minimal community discussion or media coverage.