MPG321文件名ArgV缓冲区溢出漏洞

漏洞信息详情

MPG321文件名ArgV缓冲区溢出漏洞

• CNNVD编号：CNNVD-200205-112
• 危害等级： 超危
  
  
• CVE编号：
  CVE-2002-0272
  
• 漏洞类型：
  
  
  缓冲区溢出
  
• 发布时间：
  
  2002-05-31
  
• 威胁类型：
  
  
  远程
  
• 更新时间：
  
  2005-10-20
  
• 厂        商：
  
  mpg321
• 漏洞来源：
  This vulnerability…

Mpg321 0.2.9之前的版本存在缓冲区溢出漏洞。本地攻击者，可能还包括远程攻击者可以借助（1）命令行选项，（2）HTTP请求，或（3）FTP请求的超长URL执行任意代码。

RedHat has strongly suggested upgrading to the newest available version.
mpg321 mpg321 0.2.2

• RedHat libmad-0.14.2b-3.i386.rpm
  ftp://updates.redhat.com/7.2/en/os/i386/libmad-0.14.2b-3.i386.rpm
• RedHat libmad-0.14.2b-3.ia64.rpm
  ftp://updates.redhat.com/7.2/en/os/ia64/libmad-0.14.2b-3.ia64.rpm
• RedHat libmad-0.14.2b-3.src.rpm
  ftp://updates.redhat.com/7.2/en/os/SRPMS/libmad-0.14.2b-3.src.rpm
• RedHat mpg321-0.2.9-2.5.i386.rpm
  ftp://updates.redhat.com/7.2/en/os/i386/mpg321-0.2.9-2.5.i386.rpm
• RedHat mpg321-0.2.9-2.5.src.rpm
  ftp://updates.redhat.com/7.2/en/os/SRPMS/mpg321-0.2.9-2.5.src.rpm

mpg321 mpg321 0.2.3

• RedHat libmad-0.14.2b-3.i386.rpm
  ftp://updates.redhat.com/7.2/en/os/i386/libmad-0.14.2b-3.i386.rpm
• RedHat libmad-0.14.2b-3.ia64.rpm
  ftp://updates.redhat.com/7.2/en/os/ia64/libmad-0.14.2b-3.ia64.rpm
• RedHat libmad-0.14.2b-3.src.rpm
  ftp://updates.redhat.com/7.2/en/os/SRPMS/libmad-0.14.2b-3.src.rpm
• RedHat mpg321-0.2.9-2.5.i386.rpm
  ftp://updates.redhat.com/7.2/en/os/i386/mpg321-0.2.9-2.5.i386.rpm
• RedHat mpg321-0.2.9-2.5.src.rpm
  ftp://updates.redhat.com/7.2/en/os/SRPMS/mpg321-0.2.9-2.5.src.rpm

mpg321 mpg321 0.2.9

• RedHat libmad-0.14.2b-3.i386.rpm
  ftp://updates.redhat.com/7.2/en/os/i386/libmad-0.14.2b-3.i386.rpm
• RedHat libmad-0.14.2b-3.ia64.rpm
  ftp://updates.redhat.com/7.2/en/os/ia64/libmad-0.14.2b-3.ia64.rpm
• RedHat libmad-0.14.2b-3.src.rpm
  ftp://updates.redhat.com/7.2/en/os/SRPMS/libmad-0.14.2b-3.src.rpm
• RedHat mpg321-0.2.9-2.5.i386.rpm
  ftp://updates.redhat.com/7.2/en/os/i386/mpg321-0.2.9-2.5.i386.rpm
• RedHat mpg321-0.2.9-2.5.src.rpm
  ftp://updates.redhat.com/7.2/en/os/SRPMS/mpg321-0.2.9-2.5.src.rpm

来源: sourceforge.net
链接:http://sourceforge.net/project/shownotes.php?release_id=79237

来源: VULN-DEV
名称: 20020212 mpg321
链接:http://marc.theaimsgroup.com/?l=vuln-dev&m=101355590918475&w=2

来源: BID
名称: 4091
链接:http://www.securityfocus.com/bid/4091

来源: BUGTRAQ
名称: 20020213 Re: mpg321
链接:http://marc.theaimsgroup.com/?l=bugtraq&m=101366518310823&w=2