358 matches found
mpg123 buffer overflow
getauthfromurl buffer overflow...
mpg123 "getauthfromurl" buffer overflow
Security Advisory 01, 2004 Carlos Barros barros at barrossecurity d0t com www.barrossecurity.com Title: mpg123 buffer overflows Vulnerable packages: mpg123-pre0.59s; mpg123-0.59r. Date: 08/10/2004 Legal notice: This Advisory is Copyright c 2004 Carlos Barros. Permission is granted for the...
CVE-2004-0805
Buffer overflow in layer2.c in mpg123 0.59r and possibly mpg123 0.59s allows remote attackers to execute arbitrary code via a certain 1 mp3 or 2 mp2 file...
CVE-2004-0805
Buffer overflow in layer2.c in mpg123 0.59r and possibly mpg123 0.59s allows remote attackers to execute arbitrary code via a certain 1 mp3 or 2 mp2 file...
CVE-2004-0805
CVE-2004-0805 is a buffer overflow in mpg123 (layer2.c) affecting mpg123 0.59r and possibly 0.59s. It allows remote attackers to execute arbitrary code by processing a crafted MP3 or MP2 file. The Connected documents corroborate this family of advisories for various distributions (Debian, Gentoo ...
[SECURITY] [DSA 564-1] New mpg123 packages fix arbitrary code exceution
-------------------------------------------------------------------------- Debian Security Advisory DSA 564-1 [email protected] http://www.debian.org/security/ Martin Schulze October 13th, 2004 http://www.debian.org/security/faq -...
[SECURITY] [DSA 564-1] New mpg123 packages fix arbitrary code exceution
-------------------------------------------------------------------------- Debian Security Advisory DSA 564-1 [email protected] http://www.debian.org/security/ Martin Schulze October 13th, 2004 http://www.debian.org/security/faq -...
DSA-564-1 mpg123 - missing user input sanitising
Bulletin has no description...
Debian DSA-435-1 : mpg123 - heap overflow
A vulnerability was discovered in mpg123, a command-line mp3 player, whereby a response from a remote HTTP server could overflow a buffer allocated on the heap, potentially permitting execution of arbitrary code with the privileges of the user invoking mpg123. In order for this vulnerability to b...
Mandrake Linux Security Advisory : mpg123 (MDKSA-2004:100)
A vulnerability in mpg123 was discovered by Davide Del Vecchio where certain malicious mpg3/2 files would cause mpg123 to fail header checks, which could in turn allow arbitrary code to be executed with the privileges of the user running mpg123 CVE-2004-0805. As well, an older vulnerability in...
mpg123: Buffer overflow vulnerability
Background mpg123 is a MPEG Audio Player. Description mpg123 contains a buffer overflow in the code that handles layer2 decoding of media files. Impact An attacker can possibly exploit this bug with a specially-crafted mp3 or mp2 file to execute arbitrary code with the permissions of the user...
GLSA-200409-20 : mpg123: Buffer overflow vulnerability
The remote host is affected by the vulnerability described in GLSA-200409-20 mpg123: Buffer overflow vulnerability mpg123 contains a buffer overflow in the code that handles layer2 decoding of media files. Impact : An attacker can possibly exploit this bug with a specially crafted mp3 or mp2 file...
FreeBSD : mpg123 buffer overflow (119)
The following package needs to be updated: mpg123-esound %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg15e0e96302ed11d9a20900061bc2ad93.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...
[Full-Disclosure] mpg123 buffer overflow vulnerability
======================================================= mpg123-0.59r buffer overflow vulnerability ======================================================= Davide Del Vecchio Adv10 Discovered in: 16/08/2003 Date: 06/09/2003 Version affected: mpg123-0.59r and maybe mpg123-0.59s CVE: CAN-2004-0805...
mpg123 Multiple Remote Overflows
Binary data 2265.prm...
Mandrake Linux Security Advisory : mpg123 (MDKSA-2003:078)
A vulnerability in the mpg123 mp3 player could allow local and/or remote attackers to cause a DoS and possibly execute arbitrary code via an mp3 file with a zero bitrate, which causes a negative frame size. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package chec...
FreeBSD : mpg123 vulnerabilities (118)
The following package needs to be updated: mpg123-esound %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg9fccad5a709611d8873f0020ed76ef5a.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...
[SECURITY] [DSA 435-1] New mpg123 packages fix heap overflow
-------------------------------------------------------------------------- Debian Security Advisory DSA 435-1 [email protected] http://www.debian.org/security/ Matt Zimmerman February 6th, 2004 http://www.debian.org/security/faq -...