Gentoo: GLSA-200607-01 Normal: mpg123 Heap Overflow Execution Threat

Gentoo Linux Security Advisory GLSA 200607-01 https://security.gentoo.org/ Severity: Normal Title: mpg123: Heap overflow Date: July 03, 2006 Bugs: #133988 ID: 200607-01

Synopsis ======= A heap overflow in mpg123 was discovered, which could result in the execution of arbitrary code.
Background ========= mpg123 is a real time audio player designed for the MPEG format.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 media-sound/mpg123 < 0.59s-r11 >= 0.59s-r11
========== In httpdget.c, a variable is assigned to the heap, and is supposed to receive a smaller allocation. As this variable was not terminated properly, strncpy() will overwrite the data assigned next...