OSVDB ID: 3331 Title: mpg321 Remotely Exploitable |
Info |
|
|
Dates |
||||
|
|
Description |
A remote overflow exists in mpg321. The package fails to validate some striugs within an MP3 file resulting in a printf() overflow. With a specially crafted MP3 file, an attacker can cause execution of arbitrary code resulting in a loss of integrity and/or availability. |
Classification |
Location:
Remote / Network Access
|
Solution |
For the current stable Debian distribution (woody) upgrade to mpg321 version 0.2.10.2. For the unstable distribution (sid) upgrade to mpg321 version 0.2.10.3. An upgrade is required as there are no known workarounds. |
Products |
|
References |
|
Credit |
Unknown or Incomplete |