The OpenCORE multimedia decoding subsystem suffers from an insufficient bounds checking vulnerability during MP3 decoding. Versions 2.0 and below are affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/74768/oCERT-2009-002.txt
Source: https://packetstormsecurity.com/files/74768/Open-Source-CERT-Security-Advisory-2009.2.html