mpg123 Invalid MP3 Header Memory Corruption Vulnerability
BID:6593
Info
mpg123 Invalid MP3 Header Memory Corruption Vulnerability
| Bugtraq ID: | 6593 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 13 2003 12:00AM |
| Updated: | Jan 13 2003 12:00AM |
| Credit: | Discovery of this vulnerability credited to [email protected]. |
| Vulnerable: |
mpg123 mpg123 pre0.59s |
| Not Vulnerable: |
mpg123 mpg123 0.59 r mpg123 mpg123 0.59 q mpg123 mpg123 0.59 p mpg123 mpg123 0.59 o mpg123 mpg123 0.59 n mpg123 mpg123 0.59 m |
Discussion
mpg123 Invalid MP3 Header Memory Corruption Vulnerability
A memory corruption vulnerability has been reported for mpg123 that may result in code execution.
The vulnerability exists when mpg123 is used to play certain MP3 files. Specifically, when playing MP3 files with malformed headers, it may be possible to cause mpg123 to execute malicious attacker-supplied code.
A memory corruption vulnerability has been reported for mpg123 that may result in code execution.
The vulnerability exists when mpg123 is used to play certain MP3 files. Specifically, when playing MP3 files with malformed headers, it may be possible to cause mpg123 to execute malicious attacker-supplied code.
Solution / Fix
mpg123 Invalid MP3 Header Memory Corruption Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
mpg123 Invalid MP3 Header Memory Corruption Vulnerability
References:
References:
- mpg123 Home Page (mpg123)
- Local/Remote Exploit for mpg123 ([email protected])
- Re: Local/remote mpg123 exploit (Benjamin Tober
- Re: Local/remote mpg123 exploit (3APA3A <[email protected]>)
- Re: Local/remote mpg123 exploit (Daniel Kobras