mpg123 -- buffer overflow vulnerability

2005-01-0100:00:00

vuxml.freebsd.org

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.098 Low

EPSS

Percentile

94.8%

JSON

Yuri D’Elia has found a buffer overflow vulnerability in
mpg123’s parsing of frame headers in input streams. This
vulnerability can potentially lead to execution of arbitrary
code with the permissions of the user running mpg123, if the
user runs mpg123 on a specially crafted MP2 or MP3 file.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchmpg123< 0.59r_17UNKNOWN
FreeBSDanynoarchmpg123-nas< 0.59r_17UNKNOWN
FreeBSDanynoarchmpg123-esound< 0.59r_17UNKNOWN