Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
BugTraq
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
Re[2]: Local/remote mpg123 exploit Jan 16 2003 08:43AM
3APA3A (3APA3A SECURITY NNOV RU)
Dear Benjamin Tober,

Latest release mpg123 0.59r uses large enough buffer size and may not be
exploited this way. But both versions have another one bug in frame size
calculation - zero bitrate will lead to negative frame size to be
calculated. Unchecked patches:

for 0.59r:

--- common.old ...

[ more ]  




 

Privacy Statement
Copyright 2009, SecurityFocus