Skip to content

Latest commit

 

History

History
 
 

CVE-2006-2465

Folders and files

NameName
Last commit message
Last commit date

parent directory

..
 
 
 
 

CVE-2006-2465

Experiment Environment

CentOS 6.5

INSTALL & Configuration

wget https://github.com/mudongliang/source-packages/raw/master/CVE-2006-2465/mp3info-0.8.5a.tgz
tar -xvf mp3info-0.8.5a.tgz
cd mp3info-0.8.5a
make

Problems in Installation & Configuration

How to trigger vulnerability

perl poc.pl
Note: poc.pl should be in the same folder with "mp3info"

PoCs

MP3Info Unspecified Buffer Overflow Vulnerability

MP3Info 0.8.5a - Local Buffer Overflow (SEH)

Vulnerability Details & Patch

Root Cause

Buffer overflow in MP3Info 0.8.4 allows attackers to execute arbitrary code via a long command line argument.

185		if ( !( fp=fopen(argv[i],"rb") ) ) {
186                 sprintf(error_msg,"Error opening MP3: %s",argv[i]);
187                 perror(error_msg);
		    ....

Stack Trace

Patch

References