A vulnerability has been found in mpg123, which could result in arbitrary code execution.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| media-sound/mpg123 | * | < 1.18.1 | >= 1.18.1 |
mpg123 is a realtime MPEG 1.0/2.0/2.5 audio player for layers 1, 2 and 3.
An issue has been found in mpg123 when decoding specifically crafted MP3 file, that causes a heap-based buffer overflow.
A remote attacker could entice a user to open a specially crafted MPEG file using mpg123, possibly resulting in execution of arbitrary code with the privileges of the process or a Denial of Service condition.
There is no known workaround at this time.
All mpg123 users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=media-sound/mpg123-1.18.1"
An error in mpg123 might allow for the execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| media-sound/mpg123 | * | < 1.7.2 | >= 1.7.2 |
mpg123 is a realtime MPEG 1.0/2.0/2.5 audio player for layers 1, 2 and 3.
The vendor reported a signedness error in the store_id3_text() function in id3.c, allowing for out-of-bounds memory access.
A remote attacker could entice a user to open an MPEG-1 Audio Layer 3 (MP3) file containing a specially crafted ID3 tag, possibly resulting in the execution of arbitrary code with the privileges of the user running the application.
There is no known workaround at this time.
All mpg123 users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=media-sound/mpg123-1.7.2"
A heap overflow in mpg123 was discovered, which could result in the execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| media-sound/mpg123 | * | < 0.59s-r11 | >= 0.59s-r11 |
mpg123 is a real time audio player designed for the MPEG format.
In httpdget.c, a variable is assigned to the heap, and is supposed to receive a smaller allocation. As this variable was not terminated properly, strncpy() will overwrite the data assigned next in memory.
By enticing a user to visit a malicious URL, an attacker could possibly execute arbitrary code with the rights of the user running mpg123.
There is no known workaround at this time.
All mpg123 users should update to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=media-sound/mpg123-0.59s-r11"
An attacker may be able to execute arbitrary code by way of specially crafted MP2 or MP3 files.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| media-sound/mpg123 | * | < 0.59s-r9 | >= 0.59s-r9 |
mpg123 is a real-time MPEG audio player.
mpg123 improperly parses frame headers in input streams.
By inducing a user to play a malicious file, an attacker may be able to exploit a buffer overflow to execute arbitrary code with the permissions of the user running mpg123.
There is no known workaround at this time.
All mpg123 users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=media-sound/mpg123-0.59s-r9"
mpg123 is vulnerable to a buffer overflow that allows an attacker to execute arbitrary code through the use of a malicious playlist.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| media-sound/mpg123 | * | < 0.59s-r8 | >= 0.59s-r8 |
mpg123 is a MPEG Audio Player.
Bartlomiej Sieka discovered that mpg123 contains an unsafe strcat() to an array in playlist.c. This code vulnerability may lead to a buffer overflow.
A remote attacker could craft a malicious playlist which, when used, would result in the execution of arbitrary code with the rights of the user running mpg123.
There is no known workaround at this time.
All mpg123 users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=media-sound/mpg123-0.59s-r8"
Buffer overflow vulnerabilities have been found in mpg123 which could lead to execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| media-sound/mpg123 | * | < 0.59s-r5 | >= 0.59s-r5 |
mpg123 is a MPEG Audio Player.
Buffer overflow vulnerabilities in the getauthfromURL() and http_open() functions have been reported by Carlos Barros. Additionally, the Gentoo Linux Sound Team fixed additional boundary checks which were found to be lacking.
By enticing a user to open a malicious playlist or URL or making use of a specially-crafted symlink, an attacker could possibly execute arbitrary code with the rights of the user running mpg123.
There is no known workaround at this time.
All mpg123 users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=media-sound/mpg123-0.59s-r5"
mpg123 decoding routines contain a buffer overflow bug that might lead to arbitrary code execution.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| media-sound/mpg123 | * | <= 0.59s-r3 | >= 0.59s-r4 |
mpg123 is a MPEG Audio Player.
mpg123 contains a buffer overflow in the code that handles layer2 decoding of media files.
An attacker can possibly exploit this bug with a specially-crafted mp3 or mp2 file to execute arbitrary code with the permissions of the user running mpg123.
There is no known workaround at this time.
All mpg123 users should upgrade to the latest version:
# emerge sync # emerge -pv ">=media-sound/mpg123-0.59s-r4" # emerge ">=media-sound/mpg123-0.59s-r4"