high7.5Public exploit code
CVE-2003-0865
Heap-based buffer overflow in readstring of httpget.c for mpg123 0.59r and 0.59s allows remote attackers to execute arbitrary code via a long request.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- MPG123 0.59 - Remote File Play Heap Corruption2003-09-23 · remote · linux · Verified
Impact
Heap-based buffer overflow in readstring of httpget.c for mpg123 0.59r and 0.59s allows remote attackers to execute arbitrary code via a long request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mpg123 | Mpg123 | Versions 0.59r, 0.59s |
References
- NVD record
- CVE.org record
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000781
- http://marc.info/?l=bugtraq&m=106493686331198&w=2
- http://www.debian.org/security/2004/dsa-435
- http://www.securityfocus.com/archive/1/338641
- http://www.securityfocus.com/bid/8680
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000781
- http://marc.info/?l=bugtraq&m=106493686331198&w=2
- http://www.debian.org/security/2004/dsa-435
- http://www.securityfocus.com/archive/1/338641
- http://www.securityfocus.com/bid/8680