mpg123 Buffer Overflow in getauthformURL() May Let Remote Users Execute Arbitrary Code
Categorie: Vulnerability Posted: 2004-10-22 by ReCall Views: 455 Source: Click here
Current Rating: Not rated
Details
Description: A buffer overflow vulnerability was reported in mpg123 in getauthformURL(). A remote user may be able to execute arbitrary code on the target user's system.
Carlos Barros reported that getauthfromURL() contains an overflow in the processing of the 'httpauth1' variable. A remote user can create a specially crafted playlist that, when processed by the target user, may execute arbitrary code on the target user's system.
