Family: Mandrake Local Security Checks --> Category: infos
MDKSA-2005:009: mpg123 Vulnerability Scan
Vulnerability Scan Summary
Check for the version of the mpg123 package
Detailed Explanation for this Vulnerability Test
The remote host is missing the patch for the advisory MDKSA-2005:009 (mpg123).
A vulnerability in mpg123's ability to parse frame headers in input streams
could allow a malicious file to exploit a buffer overflow and execute arbitray
code with the permissions of the user running mpg123.
The updated packages have been patched to prevent these problems.
Solution : http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2005:009
Threat Level: High
Click HERE for more information and discussions on this network vulnerability scan.