CVE-2004-0805

Buffer overflow in layer2.c in mpg123 0.59r and possibly mpg123 0.59s allows remote attackers to execute arbitrary code via a certain 1 mp3 or 2 mp2 file...

CVE-2004-0805

Buffer overflow in layer2.c in mpg123 0.59r and possibly mpg123 0.59s allows remote attackers to execute arbitrary code via a certain 1 mp3 or 2 mp2 file...

CVE-2004-0805

Buffer overflow in layer2.c in mpg123 0.59r and possibly mpg123 0.59s allows remote attackers to execute arbitrary code via a certain 1 mp3 or 2 mp2 file...

CVE-2004-1284

Buffer overflow in the findnextfile function in playlist.c for mpg123 0.59r allows remote attackers to execute arbitrary code via a crafted MP3 playlist...

CVE-2004-1284

Buffer overflow in the findnextfile function in playlist.c for mpg123 0.59r allows remote attackers to execute arbitrary code via a crafted MP3 playlist...

CVE-2004-1284

CVE-2004-1284 describes a buffer overflow in mpg123 0.59r’s find_next_file() inside playlist.c that lets a remote attacker execute arbitrary code via a crafted MP3 playlist. The issue is confirmed across several databases (NVD, SUSE, FreeBSD/OpenVAS/Nessus plugins, OSV) with CVSSv2 base score 10....

GLSA-200412-22 : mpg123: Playlist buffer overflow

The remote host is affected by the vulnerability described in GLSA-200412-22 mpg123: Playlist buffer overflow Bartlomiej Sieka discovered that mpg123 contains an unsafe strcat to an array in playlist.c. This code vulnerability may lead to a buffer overflow. Impact : A remote attacker could craft ...

mpg123: Playlist buffer overflow

Background mpg123 is a MPEG Audio Player. Description Bartlomiej Sieka discovered that mpg123 contains an unsafe strcat to an array in playlist.c. This code vulnerability may lead to a buffer overflow. Impact A remote attacker could craft a malicious playlist which, when used, would result in the...

mpg123 -- playlist processing buffer overflow vulnerability

A buffer overflow vulnerability exists in the playlist processing of mpg123. A specially crafted playlist entry can cause a stack overflow that can be used to inject arbitrary code into the mpg123 process. Note that a malicious playlist, demonstrating this vulnerability, was released by the bug...

CVE-2004-0982

CVE-2004-0982 is discussed across multiple records: mpg123 contains a buffer/heap overflow vulnerability in the mp3 URL handling. The primary condition is a long string before the @ in a URL that triggers a buffer overflow in getauthfromURL (mpg123 pre0.59s and 0.59r), allowing potentially remote...

CVE-2004-0982

Buffer overflow in the getauthfromURL function in httpget.c in mpg123 pre0.59s and mpg123 0.59r could allow remote attackers or local users to execute arbitrary code via an mp3 file that contains a long string before the @ at sign in a URL...

CVE-2004-0982

Buffer overflow in the getauthfromURL function in httpget.c in mpg123 pre0.59s and mpg123 0.59r could allow remote attackers or local users to execute arbitrary code via an mp3 file that contains a long string before the @ at sign in a URL...

Debian DSA-564-1 : mpg123 - missing user input sanitising

Davide Del Vecchio discovered a vulnerability in mpg123, a popular but non-free MPEG layer 1/2/3 audio player. A malicious MPEG layer 2/3 file could cause the header checks in mpg123 to fail, which could in turn allow arbitrary code to be executed with the privileges of the user running mpg123...

Debian DSA-578-1 : mpg123 - buffer overflow

Carlos Barros has discovered a buffer overflow in the HTTP authentication routine of mpg123, a popular but non-free MPEG layer 1/2/3 audio player. If a user opened a malicious playlist or URL, an attacker might execute arbitrary code with the rights of the calling user. %NASLMINLEVEL 70300 C...

Mandrake Linux Security Advisory : mpg123 (MDKSA-2004:120)

Carlos Barros discovered two buffer overflow vulnerabilities in mpg123; the first in the getauthfromURL function and the second in the httpopen function. These vulnerabilities could be exploited to possibly execute arbitrary code with the privileges of the user running mpg123. The provided packag...

[SECURITY] [DSA 578-1] New mpg123 packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 578-1 [email protected] http://www.debian.org/security/ Martin Schulze November 1st, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 578-1] New mpg123 packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 578-1 [email protected] http://www.debian.org/security/ Martin Schulze November 1st, 2004 http://www.debian.org/security/faq -...

DSA-578-1 mpg123 - buffer overflow

Bulletin has no description...

GLSA-200410-27 : mpg123: Buffer overflow vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200410-27 mpg123: Buffer overflow vulnerabilities Buffer overflow vulnerabilities in the getauthfromURL and httpopen functions have been reported by Carlos Barros. Additionally, the Gentoo Linux Sound Team fixed additional boundar...

mpg123: Buffer overflow vulnerabilities

Background mpg123 is a MPEG Audio Player. Description Buffer overflow vulnerabilities in the getauthfromURL and httpopen functions have been reported by Carlos Barros. Additionally, the Gentoo Linux Sound Team fixed additional boundary checks which were found to be lacking. Impact By enticing a...