Zinf形态异常的播放列表文件远程缓冲区溢出漏洞

漏洞信息详情

Zinf形态异常的播放列表文件远程缓冲区溢出漏洞

• CNNVD编号：CNNVD-200502-036
• 危害等级： 超危
  
  
• CVE编号：
  CVE-2004-0964
  
• 漏洞类型：
  
  
  缓冲区溢出
  
• 发布时间：
  
  2005-02-09
  
• 威胁类型：
  
  
  远程
  
• 更新时间：
  
  2005-10-20
  
• 厂        商：
  
  debian
• 漏洞来源：
  Discovery is credi…

Zinf 是一款音乐播放器软件。
Windows和其他较早版本Linux上的Zinf 2.2.1中的缓冲区溢出，可让远程攻击者或本地用户通过.pls文件中的某些值执行任意代码。

目前厂商已经发布了升级补丁以修复这个安全问题，补丁下载链接：
Debian Linux 3.0 hppa
Debian freeamp-extras_2.1.1.0-4woody2_hppa.deb
Debian GNU/Linux 3.0 alias woody
http://security.debian.org/pool/updates/main/f/freeamp/freeamp-extras_ 2.1.1.0-4woody2_hppa.deb
Debian freeamp_2.1.1.0-4woody2_hppa.deb
Debian GNU/Linux 3.0 alias woody
http://security.debian.org/pool/updates/main/f/freeamp/freeamp_2.1.1.0 -4woody2_hppa.deb
Debian libfreeamp-esound_2.1.1.0-4woody2_hppa.deb
Debian GNU/Linux 3.0 alias woody
http://security.debian.org/pool/updates/main/f/freeamp/libfreeamp-esou nd_2.1.1.0-4woody2_hppa.deb
Debian Linux 3.0 ppc
Debian freeamp-extras_2.1.1.0-4woody2_powerpc.deb
Debian GNU/Linux 3.0 alias woody
http://security.debian.org/pool/updates/main/f/freeamp/freeamp-extras_ 2.1.1.0-4woody2_powerpc.deb
Debian freeamp_2.1.1.0-4woody2_powerpc.deb
Debian GNU/Linux 3.0 alias woody
http://security.debian.org/pool/updates/main/f/freeamp/freeamp_2.1.1.0 -4woody2_powerpc.deb
Debian libfreeamp-alsa_2.1.1.0-4woody2_powerpc.deb
Debian GNU/Linux 3.0 alias woody
http://security.debian.org/pool/updates/main/f/freeamp/libfreeamp-alsa _2.1.1.0-4woody2_powerpc.deb
Debian libfreeamp-esound_2.1.1.0-4woody2_powerpc.deb
Debian GNU/Linux 3.0 alias woody
http://security.debian.org/pool/updates/main/f/freeamp/libfreeamp-esou nd_2.1.1.0-4woody2_powerpc.deb
Debian Linux 3.0 s/390
Debian freeamp-extras_2.1.1.0-4woody2_s390.deb
Debian GNU/Linux 3.0 alias woody
http://security.debian.org/pool/updates/main/f/freeamp/freeamp-extras_ 2.1.1.0-4woody2_s390.deb
Debian freeamp_2.1.1.0-4woody2_s390.deb
Debian GNU/Linux 3.0 alias woody
http://security.debian.org/pool/updates/main/f/freeamp/freeamp_2.1.1.0 -4woody2_s390.deb
Debian libfreeamp-esound_2.1.1.0-4woody2_s390.deb
Debian GNU/Linux 3.0 alias woody
http://security.debian.org/pool/updates/main/f/freeamp/libfreeamp-esou nd_2.1.1.0-4woody2_s390.deb
Debian Linux 3.0 arm
Debian freeamp-extras_2.1.1.0-4woody2_arm.deb
Debian GNU/Linux 3.0 alias woody
http://security.debian.org/pool/updates/main/f/freeamp/freeamp-extras_ 2.1.1.0-4woody2_arm.deb
Debian freeamp_2.1.1.0-4woody2_arm.deb
Debian GNU/Linux 3.0 alias woody
http://security.debian.org/pool/updates/main/f/freeamp/freeamp_2.1.1.0 -4woody2_arm.deb
Debian libfreeamp-alsa_2.1.1.0-4woody2_arm.deb
Debian GNU/Linux 3.0 alias woody
http://security.debian.org/pool/updates/main/f/freeamp/libfreeamp-alsa _2.1.1.0-4woody2_arm.deb
Debian libfreeamp-esound_2.1.1.0-4woody2_arm.deb
Debian GNU/Linux 3.0 alias woody
http://security.debian.org/pool/updates/main/f/freeamp/libfreeamp-esou nd_2.1.1.0-4woody2_arm.deb
Debian Linux 3.0 alpha
Debian freeamp-extras_2.1.1.0-4woody2_alpha.deb
Debian GNU/Linux 3.0 alias woody
http://security.debian.org/pool/updates/main/f/freeamp/freeamp-extras_ 2.1.1.0-4woody2_alpha.deb
Debian freeamp_2.1.1.0-4woody2_alpha.deb
Debian GNU/Linux 3.0 alias woody
http://security.debian.org/pool/updates/main/f/freeamp/freeamp_2.1.1.0 -4woody2_alpha.deb
Debian libfreeamp-alsa_2.1.1.0-4woody2_alpha.deb
Debian GNU/Linux 3.0 alias woody
http://security.debian.org/pool/updates/main/f/freeamp/libfreeamp-alsa _2.1.1.0-4woody2_alpha.deb
Debian libfreeamp-esound_2.1.1.0-4woody2_alpha.deb
Debian GNU/Linux 3.0 alias woody
http://security.debian.org/pool/updates/main/f/freeamp/libfreeamp-esou nd_2.1.1.0-4woody2_alpha.deb

来源: BID
名称: 11248
链接:http://www.securityfocus.com/bid/11248

来源: DEBIAN
名称: DSA-587
链接:http://www.debian.org/security/2004/dsa-587

来源: XF
名称: zinf-pls-bo(17491)
链接:http://xforce.iss.net/xforce/xfdb/17491

来源: SECUNIA
名称: 12656
链接:http://secunia.com/advisories/12656

来源: BUGTRAQ
名称: 20040927 Re: Buffer overflow in Zinf 2.2.1 for Win32+exploit
链接:http://marc.theaimsgroup.com/?l=bugtraq&m=109638486728548&w=2

来源: BUGTRAQ
名称: 20040924 Buffer overflow in Zinf 2.2.1 for Win32
链接:http://marc.theaimsgroup.com/?l=bugtraq&m=109608092609200&w=2