Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

mpg123: frame header buffer overflow

Package(s):

mpg123

CVE #(s):

CAN-2004-0991

Created:

January 20, 2005

Updated:

January 26, 2005

Description:

mpg123 has a vulnerability in which a maliciously created file could cause a buffer overflow in the frame header parsing code, allowing arbitrary code to be executed with the permission of the user.

Alerts:

Mandrake

MDKSA-2005:009

2005-01-19

(Log in to post comments)