CVE-2003-0865: Buffer Overflow
Published Oct 17, 2003
·Updated
Heap-based buffer overflow in readstring of httpget.c for mpg123 0.59r and 0.59s allows remote attackers to execute arbitrary code via a long request.
Affected Software
2 affected components
mpg123 mpg123=0.59r
mpg123 mpg123=0.59s
Remediation
Patch Available
Patch Available
Event History
Oct 17, 2003
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Nov 17, 2003
Data Sourced
via NVD·05:00 AM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2003-0865?
CVE-2003-0865 is classified as a high severity vulnerability due to its potential to allow remote code execution.
2
How do I fix CVE-2003-0865?
To fix CVE-2003-0865, upgrade to a version of mpg123 that is not affected, specifically versions newer than 0.59r and 0.59s.
3
What kind of attack is associated with CVE-2003-0865?
CVE-2003-0865 is associated with a heap-based buffer overflow attack that can lead to arbitrary code execution.
4
Which versions of mpg123 are affected by CVE-2003-0865?
CVE-2003-0865 affects mpg123 versions 0.59r and 0.59s.
5
Can CVE-2003-0865 be exploited remotely?
Yes, CVE-2003-0865 can be exploited remotely through crafted long HTTP requests.