Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Heap-based buffer overflow in readstring of httpget.c for mpg123 0.59r and 0.59s allows remote attackers to execute arbitrary code via a long request.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
MPG123远程文件播放堆破坏漏洞
Vulnerability Description
mpg123是软件开发者Michael Hipp所研发的一款使用于Linux和Unix操作系统下的MPEG音频播放器和解码库。 mpg123没有正确部分类型的远程文件，远程攻击者可以利用这个漏洞以mpg123用户进程权限在系统上执行任意指令。 问题存在于httpget.c文件中的readstring()函数，没有正确限制写入到缓冲区的数据大小。当从远程主机读取字符串时会使用这个函数，这个函数会把字符串写入到1024字节*request缓冲区中，虽然readstring()函数原型为readstring(c
CVSS Information
N/A
Vulnerability Type
N/A