10

CVE-2004-0982

Buffer overflow in the getauthfromURL function in httpget.c in mpg123 pre0.59s and mpg123 0.59r could allow remote attackers or local users to execute arbitrary code via an mp3 file that contains a long string before the @ (at sign) in a URL.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mpg123 ≫ Mpg123 Version0.59r
Mpg123 ≫ Mpg123 Versionpre0.59s
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 6.53% 0.929
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://marc.info/?l=bugtraq&m=109834486312407&w=2
http://secunia.com/advisories/12908
http://securitytracker.com/id?1011832
http://www.barrossecurity.com/advisories/mpg123_getauthfromurl_bof_advisory.txt
http://www.debian.org/security/2004/dsa-578
Patch
Vendor Advisory
http://www.gentoo.org/security/en/glsa/glsa-200410-27.xml
http://www.osvdb.org/11023
http://www.securityfocus.com/bid/11468
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/17574