NVD

Id
48588  
Name
CVE-2009-1301  
Description
Integer signedness error in the store_id3_text function in the ID3v2 code in mpg123 before 1.7.2 allows remote attackers to cause a denial of service (out-of-bounds memory access) and possibly execute arbitrary code via an ID3 tag with a negative encoding value. NOTE: some of these details are obtained from third party information.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-04-16  
Modified Date
2009-04-29  
Seq
2009-1301  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
245042 48588 CVE-2009-1301 http://bugs.gentoo.org/show_bug.cgi?id=265342  View
245043 48588 CVE-2009-1301 [mpg123-devel] 20090405 mpg123 1.7.2 is out -- important security fix!  View
245044 48588 CVE-2009-1301 http://sourceforge.net/project/shownotes.php?release_id=673696  View
245045 48588 CVE-2009-1301 GLSA-200904-15  View
245046 48588 CVE-2009-1301 MDVSA-2009:093  View
245047 48588 CVE-2009-1301 34381  View
245048 48588 CVE-2009-1301 ADV-2009-0936  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
43563 JVNDB-2009-004570 mpg123 の ID3v2 code における整数符号エラーの脆弱性 mpg123 の ID3v2 code の store_id3_text 関数には、整数符号エラーの脆弱性が存在します。 CVE-2009-1301 38732 CVE-2009-1301 48588 10 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-004570.html 2009-04-16 2012-09-25 View