Debian: Security Advisory (DSA-1074-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 435-1 (mpg123)

The remote host is missing an update to mpg123 announced via advisory DSA 435-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mandrake Linux Security Advisory : mpg123 (MDKSA-2007:032)

The httpopen function in httpget.c in mpg123 before 0.64 allows remote attackers to cause a denial of service infinite loop by closing the HTTP connection early. Packages have been patched to correct this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

mpg123 audio player DoS

Ebdless loop in HTTP client code if HTTP server closes connection before file ctransferred completely...

MPG123 HTTP_Open()连接处理拒绝服务漏洞

MPG123是一款媒体播放程序。 MPG123包含的HTTPOpen存在问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 攻击者可以利用恶意服务器，诱使MPG123打开处理，进行拒绝服务攻击。 mpg123 mpg123 0.59 s + Gentoo Linux mpg123 mpg123 0.59 r + Conectiva Linux 8.0 + Conectiva Linux 7.0 + Debian Linux 3.0 sparc + Debian Linux 3.0 s/390 + Debian Linux 3.0 ppc + Debian Linux 3.0...

CVE-2007-0578

The httpopen function in httpget.c in mpg123 before 0.64 allows remote attackers to cause a denial of service infinite loop by closing the HTTP connection early...

CVE-2007-0578

The httpopen function in httpget.c in mpg123 before 0.64 allows remote attackers to cause a denial of service infinite loop by closing the HTTP connection early...

DEBIAN-CVE-2007-0578

The httpopen function in httpget.c in mpg123 before 0.64 allows remote attackers to cause a denial of service infinite loop by closing the HTTP connection early...

CVE-2007-0578

The httpopen function in httpget.c in mpg123 before 0.64 allows remote attackers to cause a denial of service infinite loop by closing the HTTP connection early...

CVE-2007-0578

The httpopen function in httpget.c in mpg123 before 0.64 allows remote attackers to cause a denial of service infinite loop by closing the HTTP connection early...

CVE-2007-0578

CVE-2007-0578 affects mpg123 (http_open in httpget.c) where closing the HTTP connection early can cause an infinite loop, leading to DoS. Vulnerable version: mpg123 before 0.64. Public references in Mandriva (MDKSA-2007:032) indicate patches were released to fix the issue; other sources (SUSE, NV...

Debian DSA-1074-1 : mpg123 - buffer overflow

A. Alejandro Hernandez discovered a vulnerability in mpg123, a command-line player for MPEG audio files. Insufficient validation of MPEG 2.0 layer 3 files results in several buffer overflows. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plug...

CVE-2006-3355

Heap-based buffer overflow in httpdget.c in mpg123 before 0.59s-rll allows remote attackers to execute arbitrary code via a long URL, which is not properly terminated before being used with the strncpy function. NOTE: This appears to be the result of an incomplete patch for CVE-2004-0982...

DEBIAN-CVE-2006-3355

Heap-based buffer overflow in httpdget.c in mpg123 before 0.59s-rll allows remote attackers to execute arbitrary code via a long URL, which is not properly terminated before being used with the strncpy function. NOTE: This appears to be the result of an incomplete patch for CVE-2004-0982...

CVE-2006-3355

Heap-based buffer overflow in httpdget.c in mpg123 before 0.59s-rll allows remote attackers to execute arbitrary code via a long URL, which is not properly terminated before being used with the strncpy function. NOTE: This appears to be the result of an incomplete patch for CVE-2004-0982...

CVE-2006-3355

CVE-2006-3355 affects mpg123 prior to 0.59s-rll, where a heap-based buffer overflow in httpdget.c can be triggered by a long URL not properly terminated before strncpy, allowing remote code execution. The entry notes this as the result of an incomplete patch tied to CVE-2004-0982. Connected advis...

CVE-2006-3355

Heap-based buffer overflow in httpdget.c in mpg123 before 0.59s-rll allows remote attackers to execute arbitrary code via a long URL, which is not properly terminated before being used with the strncpy function. NOTE: This appears to be the result of an incomplete patch for CVE-2004-0982...

GLSA-200607-01 : mpg123: Heap overflow

The remote host is affected by the vulnerability described in GLSA-200607-01 mpg123: Heap overflow In httpdget.c, a variable is assigned to the heap, and is supposed to receive a smaller allocation. As this variable was not terminated properly, strncpy will overwrite the data assigned next in...

mpg123: Heap overflow

Background mpg123 is a real time audio player designed for the MPEG format. Description In httpdget.c, a variable is assigned to the heap, and is supposed to receive a smaller allocation. As this variable was not terminated properly, strncpy will overwrite the data assigned next in memory. Impact...

Gentoo-Specific MPG123 - URI Remote Buffer Overflow

Gentoo-Specific MPG123 - URI Remote Buffer Overflow source: https://www.securityfocus.com/bid/18794/info The mpg123 application is prone to a remote buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input before copying it to an insufficiently sized memory...