CVE-2003-0865

mpg123 0.59r and 0.59s - Heap-Based Buffer Overflow via Long HTTP Request

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2003-0865. PoCs published by V9.

AI-analyzed exploit summary This exploit targets a heap-based buffer overflow in mpg123 versions 0.59r and pre-0.59s. It leverages the unlink() malloc chunk manipulation method to achieve remote code execution by sending a crafted HTTP response to the client.

Description

Heap-based buffer overflow in readstring of httpget.c for mpg123 0.59r and 0.59s allows remote attackers to execute arbitrary code via a long request.

Exploits (1)

exploitdb WORKING POC VERIFIED

by V9 · cremotelinux

https://www.exploit-db.com/exploits/23171

View Code ZIP pw:eip

This exploit targets a heap-based buffer overflow in mpg123 versions 0.59r and pre-0.59s. It leverages the unlink() malloc chunk manipulation method to achieve remote code execution by sending a crafted HTTP response to the client.

Classification

Working Poc 95%

Attack Type

Rce

Complexity

Complex

Reliability

Reliable

Target: mpg123 v0.59r, pre-0.59s

No auth needed

Prerequisites: Network access to the target · Target must connect to a malicious HTTP server

MITRE ATT&CK