Code execution only. Bear in mind the victim doesn't need to OPEN the .mp3 file... See the part of the article about the 'auto thumbnail' feature. I would gu

Code execution only. Bear in mind the victim doesn't need to OPEN the .mp3 file... See the part of the article about the 'auto thumbnail' feature. I would guess that a crafty attacker could package additional content inside the mp3 file, perhaps some local privilege escalation code...