CVE-2004-0982: Buffer Overflow
Published Nov 19, 2004
·Updated
Buffer overflow in the getauthfromURL function in httpget.c in mpg123 pre0.59s and mpg123 0.59r could allow remote attackers or local users to execute arbitrary code via an mp3 file that contains a long string before the @ (at sign) in a URL.
Affected Software
2 affected components
mpg123 mpg123=0.59r
mpg123 mpg123=pre0.59s
Remediation
Patch Available
Patch Available
Event History
Nov 19, 2004
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-0982?
CVE-2004-0982 is a critical vulnerability due to its potential for remote code execution.
2
How do I fix CVE-2004-0982?
To fix CVE-2004-0982, users should upgrade to a newer version of mpg123 that is not affected by this vulnerability.
3
What systems are affected by CVE-2004-0982?
CVE-2004-0982 affects mpg123 versions pre0.59s and 0.59r.
4
Can CVE-2004-0982 be exploited remotely?
Yes, CVE-2004-0982 can be exploited by remote attackers through specially crafted MP3 files.
5
What kind of attacks can CVE-2004-0982 enable?
CVE-2004-0982 can enable attackers to execute arbitrary code on the vulnerable system.