Lucene search
MitreCVE-2004-0991HistoryJan 19, 2005 - 5:00 a.m.
CVE-2004-0991
2005-01-1905:00:00
mitre
web.nvd.nist.gov
35
nvd
cve-2004-0991
information security
buffer overflow
arbitrary code execution
remote attack
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.6
Confidence
Low
EPSS
0.098
Percentile
94.8%
Buffer overflow in mpg123 before 0.59s-r9 allows remote attackers to execute arbitrary code via frame headers in MP2 or MP3 files.
Affected configurations
Node
mpg123mpg123Match0.59m
ORmpg123mpg123Match0.59n
ORmpg123mpg123Match0.59o
ORmpg123mpg123Match0.59p
ORmpg123mpg123Match0.59q
ORmpg123mpg123Match0.59r
ORmpg123mpg123Match0.59s
Node
susesuse_linuxMatch8.0
ORsusesuse_linuxMatch8.0i386
ORsusesuse_linuxMatch8.1
ORsusesuse_linuxMatch8.2
ORsusesuse_linuxMatch9.0
ORsusesuse_linuxMatch9.0x86_64
ORsusesuse_linuxMatch9.1
ORsusesuse_linuxMatch9.2
| Vendor | Product | Version | CPE |
|---|---|---|---|
| mpg123 | mpg123 | 0.59m | cpe:2.3:a:mpg123:mpg123:0.59m:*:*:*:*:*:*:* |
| mpg123 | mpg123 | 0.59n | cpe:2.3:a:mpg123:mpg123:0.59n:*:*:*:*:*:*:* |
| mpg123 | mpg123 | 0.59o | cpe:2.3:a:mpg123:mpg123:0.59o:*:*:*:*:*:*:* |
| mpg123 | mpg123 | 0.59p | cpe:2.3:a:mpg123:mpg123:0.59p:*:*:*:*:*:*:* |
| mpg123 | mpg123 | 0.59q | cpe:2.3:a:mpg123:mpg123:0.59q:*:*:*:*:*:*:* |
| mpg123 | mpg123 | 0.59r | cpe:2.3:a:mpg123:mpg123:0.59r:*:*:*:*:*:*:* |
| mpg123 | mpg123 | 0.59s | cpe:2.3:a:mpg123:mpg123:0.59s:*:*:*:*:*:*:* |
| suse | suse_linux | 8.0 | cpe:2.3:o:suse:suse_linux:8.0:*:*:*:*:*:*:* |
| suse | suse_linux | 8.0 | cpe:2.3:o:suse:suse_linux:8.0:*:i386:*:*:*:*:* |
| suse | suse_linux | 8.1 | cpe:2.3:o:suse:suse_linux:8.1:*:*:*:*:*:*:* |
Related
freebsd
freebsd
mpg123 -- buffer overflow vulnerability
2005-01-01 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 200501-14 (media-sound/mpg123)
2008-09-24 00:00:00
FreeBSD Ports: mpg123, mpg123-nas, mpg123-esound
2008-09-04 00:00:00
Gentoo Security Advisory GLSA 200501-14 (media-sound/mpg123)
2008-09-24 00:00:00
cvelist
cvelist
CVE-2004-0991
2005-01-19 05:00:00
CVE-2006-1655
2006-04-06 10:00:00
debiancve
debiancve
CVE-2004-0991
2005-01-19 05:00:00
CVE-2006-1655
2006-04-06 10:04:00
nessus
nessus
GLSA-200501-14 : mpg123: Buffer overflow
2005-02-14 00:00:00
Mandrake Linux Security Advisory : mpg123 (MDKSA-2005:009)
2005-01-19 00:00:00
ubuntucve
ubuntucve
CVE-2004-0991
2005-01-11 00:00:00
CVE-2006-1655
2006-04-06 00:00:00
nvd
nvd
CVE-2004-0991
2005-01-11 05:00:00
CVE-2006-1655
2006-04-06 10:04:00
gentoo
gentoo
mpg123: Buffer overflow
2005-01-10 00:00:00
prion
prion
Buffer overflow
2006-04-06 10:04:00
cve
cve
CVE-2006-1655
2006-04-06 10:04:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.6
Confidence
Low
EPSS
0.098
Percentile
94.8%
Related for CVE-2004-0991