Buffer overflow in the Windows Shell function in Microsoft Windows XP allows remote attackers to execute arbitrary code via an .MP3 or .WMA audio file with a corrupt custom attribute, aka "Unchecked Buffer in Windows Shell Could Enable System Compromise."
https://exchange.xforce.ibmcloud.com/vulnerabilities/10892
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-072
http://www.securityfocus.com/bid/6427
http://www.kb.cert.org/vuls/id/591890