Integer overflow

Integer signedness error in the storeid3text function in the ID3v2 code in mpg123 before 1.7.2 allows remote attackers to cause a denial of service out-of-bounds memory access and possibly execute arbitrary code via an ID3 tag with a negative encoding value. NOTE: some of these details are obtain...

CVE-2009-1301

Summary (CVE-2009-1301) : mpg123 before 1.7.2 contains an integer signedness error in the ID3v2 store_id3_text function. This flaw can be triggered by a crafted ID3 tag with a negative encoding value, leading to out-of-bounds memory access and potentially a remote code execution or denial-of-serv...

CVE-2009-1301

Integer signedness error in the storeid3text function in the ID3v2 code in mpg123 before 1.7.2 allows remote attackers to cause a denial of service out-of-bounds memory access and possibly execute arbitrary code via an ID3 tag with a negative encoding value. NOTE: some of these details are obtain...

CVE-2009-1301

Integer signedness error in the storeid3text function in the ID3v2 code in mpg123 before 1.7.2 allows remote attackers to cause a denial of service out-of-bounds memory access and possibly execute arbitrary code via an ID3 tag with a negative encoding value. NOTE: some of these details are obtain...

mpg123 'store_id3_text()'内存破坏漏洞

BUGTRAQ ID: 34381 CNCAN ID：CNCAN-2009040702 mpg123是一款媒体播放程序。 mpg123 ID3v2代码在解析非法文本编码值时存在内存破坏问题，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 构建特殊的媒体文件，诱使用户解析，可触发此漏洞。 mpg123 mpg123 1.7.1 mpg123 mpg123 1.7 升级程序： mpg123 mpg123 1.7 mpg123 mpg123-1.7.2.tar.bz...

Fedora Update for id3lib FEDORA-2007-1774

Check for the Version of id3lib OpenVAS Vulnerability Test Fedora Update for id3lib FEDORA-2007-1774 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

[SECURITY] Fedora 7 Update: libid3tag-0.15.1b-5.fc7

libid3tag is a library for reading and eventually writing ID3 tags, both ID3v1 and the various versions of ID3v2...

id3lib library array overflow

extflags array overflow on ID3v2 array parsing...

Array overflow in id3lib (devel CVS)

Luigi Auriemma Application: id3lib http://id3lib.sourceforge.net Versions: only devel CVS stable 3.8.3 is NOT affected Platforms: Windows, nix and Mac Bug: array overflow Exploitation: local Date: 19 Dec 2007 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introduction 2 Bug...

[SECURITY] Fedora 7 Update: id3lib-3.8.3-17.fc7

This package provides a software library for manipulating ID3v1 and ID3v2 tags. It provides a convenient interface for software developers to include standards-compliant ID3v1/2 tagging capabilities in their applications. Features include identification of valid tags, automatic size conversions,...

CVE-2005-2310

Buffer overflow in Winamp 5.03a, 5.09 and 5.091, and other versions before 5.094, allows remote attackers to execute arbitrary code via an MP3 file with a long ID3v2 tag such as 1 ARTIST or 2 TITLE...

Nullsoft Winamp < 5.093 Malformed ID3v2 Tag Overflow

Binary data 3069.prm...

Winamp < 5.093 Malformed ID3v2 Tag Handling Buffer Overflow

The remote host is using Winamp, a popular media player for Windows. The installed version of Winamp suffers from a buffer overflow vulnerability when processing overly-long ID3v2 tags in an MP3 file. An attacker may be able to exploit this flaw to execute arbitrary code on the remote host...

WinAmp MP3 files ID3v2 tags buffer overflow

Buffer overflow on oversized ID3v2 tag fields...

NullSoft Winamp 5.0 - Malformed ID3v2 Tag Buffer Overflow

NullSoft Winamp 5.0 - Malformed ID3v2 Tag Buffer Overflow source: https://www.securityfocus.com/bid/14276/info Winamp is susceptible to a buffer overflow vulnerability in its ID3v2 functionality. This issue is due to a failure of the application to properly bounds check input data prior to copyin...

NullSoft Winamp 5.0 - Malformed ID3v2 Tag Buffer Overflow

source: https://www.securityfocus.com/bid/14276/info Winamp is susceptible to a buffer overflow vulnerability in its ID3v2 functionality. This issue is due to a failure of the application to properly bounds check input data prior to copying it into a fixed size memory buffer. This issue will...

CVE-2002-1176

Buffer overflow in Winamp 2.81 allows remote attackers to execute arbitrary code via a long Artist ID3v2 tag in an MP3 file...

CVE-2002-1177

Multiple buffer overflows in Winamp 3.0, when displaying an MP3 in the Media Library window, allows remote attackers to execute arbitrary code via an MP3 file containing a long 1 Artist or 2 Album ID3v2 tag...

CVE-2002-1176

This CVE concerns Winamp 2.81 (and Winamp 3.0) with buffer overflows in ID3v2 tag handling. A long Artist ID3v2 tag in an MP3 can cause a crash or allow remote code execution when loaded, per Foundstone advisory and NVD entry. Winamp 2.81 and Winamp 3.0 contain the overflow in the Artist field of...

CVE-2002-1177

CVE-2002-1177 maps to multiple buffer overflows in Winamp 3.0, specifically in the Media Library handling of ID3v2 tags. The vulnerability occurs when displaying an MP3 in the Media Library window, where long Artist or Album ID3v2 tags can cause memory corruption, enabling remote code execution. ...