HTTP: mpg123 Remote Stereo Boundary Buffer Overflow

This signature detects the download of a maliciously crafted MPEG Audio file. If attackers can cause a host to read such a file using MPG123, they can execute arbitrary code on the target host.

Extended Description

Reportedly mpg123 is affected by a remote stereo boundary buffer overflow vulnerability. This issue is due to a failure of the application to properly validate user-supplied string sizes prior to copying them into process buffers. This issue will allow a malicious user to manipulate process memory ultimately leading to arbitrary code execution in the context of the user that started the vulnerable application.

Affected Products

Mandriva corporate_server

References

BugTraq: 11121

CVE: CVE-2004-0805

URL: http://www.securityfocus.com/archive/1/374433

Short Name

HTTP:STC:MPG123-STEREO-OF

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: mpg123 Remote Stereo Boundary Buffer Overflow

Extended Description

Affected Products

References

Found a potential security threat?