The company advised people to remove the associations in the program for the ".cda" and ".m3u" extensions in order to avoid being bitten by the bug, which it rated as "highly critical" -- the company's second highest rating.
The vulnerability is due to a memory problem with a certain function in the program that reads the music lists. The flaw occurs in version 5.05 and 5.06 of the program, the firm stated.











