CVE-2006-2465

MEDIO 5.1CVE-2006-2465 · Published 19/05/2006 · updated 16/06/2026

En resumen

CVE-2006-2465 es una vulnerabilidad MEDIO (CVSS 5.1) que afecta a mp3info (mp3info).
Probabilidad de explotación en los próximos 30 días (EPSS): 5.5%, mayor que el 92.9% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
mp3info mp3info	`= 0.8.4`	No fix yet

Description

Buffer overflow in MP3Info 0.8.4 allows attackers to execute arbitrary code via a long command line argument. NOTE: if mp3info is not installed setuid or setgid in any reasonable context, then this issue might not be a vulnerability.

References

osvdb.org/show/osvdb/30945
packetstormsecurity.com/files/124955/Mp3info-Stack-Buffer-Overflow.html
packetstormsecurity.com/files/125786/MP3Info-0.8.5-SEH-Buffer-Overflow.html
securitytracker.com/id
exploit-db.com/exploits/32358
securiteam.com/exploits/5GP0E15IKO.html · Exploit
securityfocus.com/bid/18016

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free