CVE-2006-1655 - Multiple buffer overflows in mpg123 0.59r allow user-assisted attackers to trigger a segmentation fa

CVE-2006-1655

Summary

Multiple buffer overflows in mpg123 0.59r allow user-assisted attackers to trigger a segmentation fault and possibly have other impacts via a certain MP3 file, as demonstrated by mpg1DoS3. NOTE: this issue might be related to CVE-2004-0991, but it is not clear.

References

http://downloads.securityfocus.com/vulnerabilities/exploits/mpg1DoS3.pl
http://secunia.com/advisories/20240
http://secunia.com/advisories/20275
http://secunia.com/advisories/20281
http://www.debian.org/security/2006/dsa-1074
http://www.mandriva.com/security/advisories?name=MDKSA-2006:092
http://www.securityfocus.com/bid/17365

Vulnerable Configurations

cpe:2.3:a:mpg123:mpg123:0.59r:*:*:*:*:*:*:*
cpe:2.3:a:mpg123:mpg123:0.59r:*:*:*:*:*:*:*

CVSS

Base:	6.5 (as of 02-04-2010 - 07:23)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	SINGLE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	PARTIAL

cvss-vector via4

AV:N/AC:L/Au:S/C:P/I:P/A:P

refmap via4

bid	17365
debian	DSA-1074
mandriva	MDKSA-2006:092
misc	http://downloads.securityfocus.com/vulnerabilities/exploits/mpg1DoS3.pl
secunia	20240 20275 20281

Last major update

02-04-2010 - 07:23

Published

06-04-2006 - 10:04

Last modified

02-04-2010 - 07:23