Lucene search
+L

358 matches found

securityvulns
securityvulns
added 2004/10/22 12:00 a.m.30 views

mpg123 buffer overflow

getauthfromurl buffer overflow...

3.9AI score
SaveExploits0References1Affected Software1
securityvulns
securityvulns
added 2004/10/22 12:00 a.m.28 views

mpg123 "getauthfromurl" buffer overflow

Security Advisory 01, 2004 Carlos Barros barros at barrossecurity d0t com www.barrossecurity.com Title: mpg123 buffer overflows Vulnerable packages: mpg123-pre0.59s; mpg123-0.59r. Date: 08/10/2004 Legal notice: This Advisory is Copyright c 2004 Carlos Barros. Permission is granted for the...

SaveExploits0
Cvelist
Cvelist
added 2004/10/20 4:00 a.m.39 views

CVE-2004-0805

Buffer overflow in layer2.c in mpg123 0.59r and possibly mpg123 0.59s allows remote attackers to execute arbitrary code via a certain 1 mp3 or 2 mp2 file...

7.6AI score0.03786EPSS
SaveExploits0References8
Debian CVE
Debian CVE
added 2004/10/20 4:00 a.m.24 views

CVE-2004-0805

Buffer overflow in layer2.c in mpg123 0.59r and possibly mpg123 0.59s allows remote attackers to execute arbitrary code via a certain 1 mp3 or 2 mp2 file...

7.5CVSS7.6AI score0.03786EPSS
SaveExploits0
CVE
CVE
added 2004/10/20 4:00 a.m.71 views

CVE-2004-0805

CVE-2004-0805 is a buffer overflow in mpg123 (layer2.c) affecting mpg123 0.59r and possibly 0.59s. It allows remote attackers to execute arbitrary code by processing a crafted MP3 or MP2 file. The Connected documents corroborate this family of advisories for various distributions (Debian, Gentoo ...

7.5CVSS7.6AI score0.03786EPSS
SaveExploits0References8Affected Software1
Debian
Debian
added 2004/10/13 1:00 p.m.35 views

[SECURITY] [DSA 564-1] New mpg123 packages fix arbitrary code exceution

-------------------------------------------------------------------------- Debian Security Advisory DSA 564-1 [email protected] http://www.debian.org/security/ Martin Schulze October 13th, 2004 http://www.debian.org/security/faq -...

7.5CVSS0.2AI score0.03786EPSS
SaveExploits0
Debian
Debian
added 2004/10/13 1:00 p.m.31 views

[SECURITY] [DSA 564-1] New mpg123 packages fix arbitrary code exceution

-------------------------------------------------------------------------- Debian Security Advisory DSA 564-1 [email protected] http://www.debian.org/security/ Martin Schulze October 13th, 2004 http://www.debian.org/security/faq -...

7.5CVSS6.6AI score0.03786EPSS
SaveExploits0
OSV
OSV
added 2004/10/13 12:00 a.m.20 views

DSA-564-1 mpg123 - missing user input sanitising

Bulletin has no description...

7.5CVSS6.3AI score0.03786EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2004/09/29 12:00 a.m.27 views

Debian DSA-435-1 : mpg123 - heap overflow

A vulnerability was discovered in mpg123, a command-line mp3 player, whereby a response from a remote HTTP server could overflow a buffer allocated on the heap, potentially permitting execution of arbitrary code with the privileges of the user invoking mpg123. In order for this vulnerability to b...

7.5CVSS5.8AI score0.14509EPSS
SaveExploits2References2
Tenable Nessus
Tenable Nessus
added 2004/09/23 12:00 a.m.32 views

Mandrake Linux Security Advisory : mpg123 (MDKSA-2004:100)

A vulnerability in mpg123 was discovered by Davide Del Vecchio where certain malicious mpg3/2 files would cause mpg123 to fail header checks, which could in turn allow arbitrary code to be executed with the privileges of the user running mpg123 CVE-2004-0805. As well, an older vulnerability in...

7.5CVSS6.4AI score0.14509EPSS
SaveExploits2References2
Gentoo Linux
Gentoo Linux
added 2004/09/16 12:00 a.m.33 views

mpg123: Buffer overflow vulnerability

Background mpg123 is a MPEG Audio Player. Description mpg123 contains a buffer overflow in the code that handles layer2 decoding of media files. Impact An attacker can possibly exploit this bug with a specially-crafted mp3 or mp2 file to execute arbitrary code with the permissions of the user...

7.5CVSS7.6AI score0.03786EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2004/09/16 12:00 a.m.33 views

GLSA-200409-20 : mpg123: Buffer overflow vulnerability

The remote host is affected by the vulnerability described in GLSA-200409-20 mpg123: Buffer overflow vulnerability mpg123 contains a buffer overflow in the code that handles layer2 decoding of media files. Impact : An attacker can possibly exploit this bug with a specially crafted mp3 or mp2 file...

7.5CVSS6.5AI score0.03786EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2004/09/14 12:00 a.m.33 views

FreeBSD : mpg123 buffer overflow (119)

The following package needs to be updated: mpg123-esound %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg15e0e96302ed11d9a20900061bc2ad93.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...

6.5AI score0.04295EPSS
SaveExploits1References12
securityvulns
securityvulns
added 2004/09/08 12:00 a.m.45 views

[Full-Disclosure] mpg123 buffer overflow vulnerability

======================================================= mpg123-0.59r buffer overflow vulnerability ======================================================= Davide Del Vecchio Adv10 Discovered in: 16/08/2003 Date: 06/09/2003 Version affected: mpg123-0.59r and maybe mpg123-0.59s CVE: CAN-2004-0805...

7.5CVSS0.3AI score0.03786EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2004/09/07 12:00 a.m.16 views

mpg123 Multiple Remote Overflows

Binary data 2265.prm...

10CVSS7.3AI score0.14458EPSS
SaveExploits2References3
Tenable Nessus
Tenable Nessus
added 2004/07/31 12:00 a.m.21 views

Mandrake Linux Security Advisory : mpg123 (MDKSA-2003:078)

A vulnerability in the mpg123 mp3 player could allow local and/or remote attackers to cause a DoS and possibly execute arbitrary code via an mp3 file with a zero bitrate, which causes a negative frame size. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package chec...

7.5CVSS5.9AI score0.03739EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2004/07/06 12:00 a.m.29 views

FreeBSD : mpg123 vulnerabilities (118)

The following package needs to be updated: mpg123-esound %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg9fccad5a709611d8873f0020ed76ef5a.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...

6.4AI score0.14509EPSS
SaveExploits2References21
Debian
Debian
added 2004/02/06 6:14 p.m.47 views

[SECURITY] [DSA 435-1] New mpg123 packages fix heap overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 435-1 [email protected] http://www.debian.org/security/ Matt Zimmerman February 6th, 2004 http://www.debian.org/security/faq -...

7.5CVSS6.6AI score0.14509EPSS
SaveExploits2
OSV
OSV
added 2004/02/06 12:00 a.m.22 views

DSA-435 mpg123 - heap overflow

Bulletin has no description...

7.5CVSS6.1AI score0.14509EPSS
SaveExploits2
NVD
NVD
added 2003/11/17 5:00 a.m.26 views

CVE-2003-0865

Heap-based buffer overflow in readstring of httpget.c for mpg123 0.59r and 0.59s allows remote attackers to execute arbitrary code via a long request...

7.5CVSS7.9AI score0.14509EPSS
SaveExploits2References6
Rows per page
Query Builder