CVE:CVE-2005-1168
CNNVD:CNNVD-200505-093
Musicmatch 10.00.2047以及较早版本中的DiagCollectionControl.dll允许远程攻击者通过bstrSavePath参数重写任意文件。
solution:Upgrade musicmatch jukebox to a higher version than 10.00.2047,9.0.5059,and avoid the version (,10.00.2047],9.0.5059