|
|
CVE Reference: CVE-2004-0982 |
|
| NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE. | |
|
Original Page at CVE MITRE: CVE-2004-0982 |
|
|
Description: Buffer overflow in the getauthfromURL function in httpget.c in mpg123 pre0.59s and mpg123 0.59r could allow remote attackers or local users to execute arbitrary code via an mp3 file that contains a long string before the @ (at sign) in a URL. |
|
|
CVE Status: Candidate |
|
|
References: XF http://xforce.iss.net/xforce/xfdb/17574 ST 1011832 SAID Secunia Advisory: SA12908 OSVDB 11023 MISC http://www.barrossecurity.com/advisories/mpg123_getauthfromurl_bof_advisory.txt GENTOO http://www.gentoo.org/security/en/glsa/glsa-200410-27.xml DEBIAN http://www.debian.org/security/2004/dsa-578 BUGTRAQ http://marc.theaimsgroup.com/?l=bugtraq&m=109834486312407&w=2 BID 11468 |
|
| Return to the previous page. |
