Buffer overflow in the find_next_file function in playlist.c for mpg123 0.59r allows remote attackers to execute arbitrary code via a crafted MP3 playlist.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Mpg123 | Mpg123 | 0.59m (including) | 0.59m (including) |
| Mpg123 | Mpg123 | 0.59n (including) | 0.59n (including) |
| Mpg123 | Mpg123 | 0.59o (including) | 0.59o (including) |
| Mpg123 | Mpg123 | 0.59p (including) | 0.59p (including) |
| Mpg123 | Mpg123 | 0.59q (including) | 0.59q (including) |
| Mpg123 | Mpg123 | 0.59r (including) | 0.59r (including) |
| Mpg123 | Mpg123 | pre0.59s (including) | pre0.59s (including) |
| Mpg123 | Ubuntu | dapper | * |
| Mpg123 | Ubuntu | devel | * |
| Mpg123 | Ubuntu | edgy | * |
| Mpg123 | Ubuntu | feisty | * |
References
- http://tigger.uic.edu/~jlongs2/holes/mpg123.txt
- http://www.novell.com/linux/security/advisories/2005_01_sr.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18626
- http://tigger.uic.edu/~jlongs2/holes/mpg123.txt
- http://www.novell.com/linux/security/advisories/2005_01_sr.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18626