FreeBSD : mpg123 -- buffer overflow vulnerability (3cc84400-6576-11d9-a9e7-0001020eed82)

High Nessus Plugin ID 18907


The remote FreeBSD host is missing one or more security-related updates.


Yuri D'Elia has found a buffer overflow vulnerability in mpg123's parsing of frame headers in input streams. This vulnerability can potentially lead to execution of arbitrary code with the permissions of the user running mpg123, if the user runs mpg123 on a specially crafted MP2 or MP3 file.


Update the affected packages.

See Also

Plugin Details

Severity: High

ID: 18907

File Name: freebsd_pkg_3cc84400657611d9a9e70001020eed82.nasl

Version: $Revision: 1.11 $

Type: local

Published: 2005/07/13

Modified: 2013/06/21

Dependencies: 12634

Risk Information

Risk Factor: High


Base Score: 7.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Information

CPE: p-cpe:/a:freebsd:freebsd:mpg123, p-cpe:/a:freebsd:freebsd:mpg123-esound, p-cpe:/a:freebsd:freebsd:mpg123-nas, cpe:/o:freebsd:freebsd

Required KB Items: Host/local_checks_enabled, Host/FreeBSD/release, Host/FreeBSD/pkg_info

Patch Publication Date: 2005/01/13

Vulnerability Publication Date: 2005/01/01

Reference Information

CVE: CVE-2004-0991