CVE-2006-2465

MEDIO 5.1CVE-2006-2465 · Published 19/05/2006 · updated 16/06/2026

In breve

CVE-2006-2465 è una vulnerabilità MEDIO (CVSS 5.1) che riguarda mp3info (mp3info).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 5.5%, superiore al 92.9% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
mp3info mp3info	`= 0.8.4`	No fix yet

Description

Buffer overflow in MP3Info 0.8.4 allows attackers to execute arbitrary code via a long command line argument. NOTE: if mp3info is not installed setuid or setgid in any reasonable context, then this issue might not be a vulnerability.

References

osvdb.org/show/osvdb/30945
packetstormsecurity.com/files/124955/Mp3info-Stack-Buffer-Overflow.html
packetstormsecurity.com/files/125786/MP3Info-0.8.5-SEH-Buffer-Overflow.html
securitytracker.com/id
exploit-db.com/exploits/32358
securiteam.com/exploits/5GP0E15IKO.html · Exploit
securityfocus.com/bid/18016

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free