Secunia Logo  


Secunia PSI WorldMap
 
CVE Reference: CVE-2004-0982
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE:
CVE-2004-0982

Description:
Buffer overflow in the getauthfromURL function in httpget.c in mpg123 pre0.59s and mpg123 0.59r could allow remote attackers or local users to execute arbitrary code via an mp3 file that contains a long string before the @ (at sign) in a URL.

CVE Status:
Candidate

References:

XF
  http://xforce.iss.net/xforce/xfdb/17574

ST
  1011832

SAID
  Secunia Advisory: SA12908

OSVDB
  11023

MISC
  http://www.barrossecurity.com/advisories/mpg123_getauthfromurl_bof_advisory.txt

GENTOO
  http://www.gentoo.org/security/en/glsa/glsa-200410-27.xml

DEBIAN
  http://www.debian.org/security/2004/dsa-578

BUGTRAQ
  http://marc.theaimsgroup.com/?l=bugtraq&m=109834486312407&w=2

BID
  11468


Return to the previous page.