Test ID:	1.3.6.1.4.1.25623.1.0.900538
Category:	Denial of Service
Title:	mpg123 Player Denial of Service Vulnerability - Linux
Summary:	mpg123 Player is prone to a denial of service (DoS) vulnerability.
Description:	Summary: mpg123 Player is prone to a denial of service (DoS) vulnerability. Vulnerability Insight: This flaw is due to integer signedness error in the store_id3_text function in the ID3v2 code when processing ID3v2 tags with negative encoding values. Vulnerability Impact: Successful exploitation will let the attacker trigger out of bounds memory access and thus execute arbitrary code and possibly crash the application. Affected Software/OS: mpg123 Player prior to 1.7.2 on Linux. Solution: Update to version 1.7.2. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2009-1301 BugTraq ID: 34381 http://www.securityfocus.com/bid/34381 http://www.gentoo.org/security/en/glsa/glsa-200904-15.xml http://www.mandriva.com/security/advisories?name=MDVSA-2009:093 http://sourceforge.net/mailarchive/message.php?msg_name=20090405211856.41696433%40sunscreen.local http://secunia.com/advisories/34587 http://secunia.com/advisories/34748 http://www.vupen.com/english/advisories/2009/0936
Copyright	Copyright (C) 2009 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.