CVE-2004-0805: Buffer Overflow
Published Oct 20, 2004
·Updated
Buffer overflow in layer2.c in mpg123 0.59r and possibly mpg123 0.59s allows remote attackers to execute arbitrary code via a certain (1) mp3 or (2) mp2 file.
Affected Software
8 affected components
mpg123 mpg123=0.59r
mpg123 mpg123=0.59s
Mandrakesoft Mandrake Linux Corporate Server=2.1
Mandrakesoft Mandrake Linux=9.2
Mandrakesoft Mandrake Linux=9.2
Mandrakesoft Mandrake Linux=10.0
Mandrakesoft Mandrake Linux Corporate Server=2.1
Mandrakesoft Mandrake Linux=10.0
Remediation
Patch Available
Event History
Oct 20, 2004
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-0805?
CVE-2004-0805 is considered a critical vulnerability due to the potential for remote code execution.
2
How do I fix CVE-2004-0805?
To fix CVE-2004-0805, update mpg123 to version 0.59s or later, or apply the relevant security patches.
3
What software is affected by CVE-2004-0805?
CVE-2004-0805 affects mpg123 versions 0.59r and 0.59s, as well as certain versions of Mandrake Linux.
4
Can CVE-2004-0805 be exploited remotely?
Yes, CVE-2004-0805 can be exploited remotely through specially crafted MP3 or MP2 files.
5
What type of vulnerability is CVE-2004-0805?
CVE-2004-0805 is a buffer overflow vulnerability.