|
|
Family: Gentoo Local Security Checks --> Category: infos
[GLSA-200409-20] mpg123: Buffer overflow vulnerability Vulnerability Scan
Vulnerability Scan Summary
mpg123: Buffer overflow vulnerability
Detailed Explanation for this Vulnerability Test
The remote host is affected by the vulnerability described in GLSA-200409-20
(mpg123: Buffer overflow vulnerability)
mpg123 contains a buffer overflow in the code that handles layer2
decoding of media files.
Impact
A possible hacker can possibly exploit this bug with a specially-crafted mp3 or mp2 file
to execute arbitrary code with the permissions of the user running mpg123.
Workaround
There is no known workaround at this time.
References:
http://www.securityfocus.com/archive/1/374433/2004-09-05/2004-09-11/0
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0805
Solution:
All mpg123 users should upgrade to the latest version:
# emerge sync
# emerge -pv ">=media-sound/mpg123-0.59s-r4"
# emerge ">=media-sound/mpg123-0.59s-r4"
Threat Level: Medium
Click HERE for more information and discussions on this network vulnerability scan.
|
