CVE-2006-2465
Buffer overflow in MP3Info 0.8.4 allows attackers to execute arbitrary code via a long command line argument. NOTE: if mp3info is not installed setuid or setgid in any reasonable context, then this issue might not be a vulnerability.
- Score
- CVSS 2.0 5.1 Medium
- Status
- Modified - cve@mitre.org
- Published
- 2006-05-19
- Last modified
- 2024-08-07
Affected products
References
- http://osvdb.org/show/osvdb/30945
- http://packetstormsecurity.com/files/124955/Mp3info-Stack-Buffer-Overflow.html
- http://packetstormsecurity.com/files/125786/MP3Info-0.8.5-SEH-Buffer-Overflow.html
- http://securitytracker.com/id?1016108
- http://www.exploit-db.com/exploits/32358
- http://www.securiteam.com/exploits/5GP0E15IKO.html
- http://www.securityfocus.com/bid/18016
