• info
• discussion
• exploit
• solution
• references

Drupal Audio And MediaField Modules GetID3 Remote Command Execution Vulnerability

Solution:
The vendor has released fixes to address this issue. Please see the references for more information.


Drupal Mediafield Module 5.x-1.x-dev

• Drupal mediafield-5.x-1.0.tar.gz
  http://ftp.osuosl.org/pub/drupal/files/projects/mediafield-5.x-1.0.tar .gz

Drupal Audio Module 4.7.x-1 .x-dev

• Drupal audio-4.7.x-1.x-dev.tar.gz
  http://ftp.osuosl.org/pub/drupal/files/projects/audio-4.7.x-1.x-dev.ta r.gz

Drupal Audio Module 5.x-0.2

• Drupal audio-5.x-0.3.tar.gz
  http://ftp.osuosl.org/pub/drupal/files/projects/audio-5.x-0.3.tar.gz

Drupal Mediafield Module 4.7.x-1 .x-dev

• Drupal mediafield-4.7.x-1.0.tar.gz
  http://ftp.osuosl.org/pub/drupal/files/projects/mediafield-4.7.x-1.0.t ar.gz


• Drupal mediafield-4.7.x-1.x-dev.tar.gz
  http://ftp.osuosl.org/pub/drupal/files/projects/mediafield-4.7.x-1.x-d ev.tar.gz

Drupal Audio Module 5.x-0.x-dev

• Drupal audio-5.x-0.x-dev.tar.gz
  http://ftp.osuosl.org/pub/drupal/files/projects/audio-5.x-0.x-dev.tar. gz