Published: 14/04/2005 Updated: 11/07/2017

CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9

VMScore: 641

Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

Buffer overflow in playmidi prior to 2.4 allows local users to execute arbitrary code.

Vulnerable Product	Search on Vulmon	Subscribe to Product
playmidi playmidi 2.3.15
playmidi playmidi 2.3.16
playmidi playmidi 2.3.23
playmidi playmidi 2.3.24
playmidi playmidi 2.3.6
playmidi playmidi 2.3.7
playmidi playmidi 2.3.13
playmidi playmidi 2.3.14
playmidi playmidi 2.3.21
playmidi playmidi 2.3.22
playmidi playmidi 2.3.4
playmidi playmidi 2.3.5
playmidi playmidi 2.3.11
playmidi playmidi 2.3.12
playmidi playmidi 2.3.2
playmidi playmidi 2.3.20
playmidi playmidi 2.3.26
playmidi playmidi 2.3.3
playmidi playmidi 2.3.1
playmidi playmidi 2.3.10
playmidi playmidi 2.3.17
playmidi playmidi 2.3.18
playmidi playmidi 2.3.19
playmidi playmidi 2.3.25
playmidi playmidi 2.3.25.1
playmidi playmidi 2.3.8
playmidi playmidi 2.3.9
mandrakesoft mandrake linux 10.1
mandrakesoft mandrake linux corporate server 3.0
mandrakesoft mandrake linux 10.0

Erik Sjölund discovered that playmidi, a MIDI player, contains a setuid root program with a buffer overflow that can be exploited by a local attacker For the stable distribution (woody) this problem has been fixed in version 24-4woody1 For the unstable distribution (sid) this problem has been fixed in version 24debian-3 We recommend that you ...

NVD-CWE-Other http://www.debian.org/security/2005/dsa-641 http://www.securityfocus.com/bid/12274 http://www.osvdb.org/13049 http://securitytracker.com/id?1012957 http://secunia.com/advisories/13828 http://secunia.com/advisories/13890 http://secunia.com/advisories/13898 http://www.mandriva.com/security/advisories?name=MDKSA-2005:010 https://exchange.xforce.ibmcloud.com/vulnerabilities/18933 https://nvd.nist.gov https://www.debian.org/security/./dsa-641

CVE-2005-0020

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect