CVE-2003-0427 Memory corruption in n/a

High 7.5 Published 20 Jun 2003 Updated 8 Aug 2024

Remote attackers can execute arbitrary code by tricking users into opening a malicious archive with a long filename in MikMod.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: A user has to click or open something
Fix: Available

What is CVE-2003-0427?

CVE-2003-0427 is a high-severity memory corruption vulnerability in n/a, published on 20 Jun 2003. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

Buffer overflow in mikmod 3.1.6 and earlier allows remote attackers to execute arbitrary code via an archive file that contains a file with a long filename.

Which versions are affected by CVE-2003-0427?

It affects 1 product.

Linux distribution packages (24)

`mikmod` Red Hat:enterprise_linux:3::as	All versions	`0:3.1.6-22.EL3`
`mikmod-debuginfo` Red Hat:enterprise_linux:3::as	All versions	`0:3.1.6-22.EL3`
`mikmod-devel` Red Hat:enterprise_linux:3::as	All versions	`0:3.1.6-22.EL3`
`mikmod` Red Hat:enterprise_linux:3::desktop	All versions	`0:3.1.6-22.EL3`
`mikmod-debuginfo` Red Hat:enterprise_linux:3::desktop	All versions	`0:3.1.6-22.EL3`
`mikmod-devel` Red Hat:enterprise_linux:3::desktop	All versions	`0:3.1.6-22.EL3`
`mikmod` Red Hat:enterprise_linux:3::es	All versions	`0:3.1.6-22.EL3`
`mikmod-debuginfo` Red Hat:enterprise_linux:3::es	All versions	`0:3.1.6-22.EL3`
`mikmod-devel` Red Hat:enterprise_linux:3::es	All versions	`0:3.1.6-22.EL3`
`mikmod` Red Hat:enterprise_linux:3::ws	All versions	`0:3.1.6-22.EL3`
`mikmod-debuginfo` Red Hat:enterprise_linux:3::ws	All versions	`0:3.1.6-22.EL3`
`mikmod-devel` Red Hat:enterprise_linux:3::ws	All versions	`0:3.1.6-22.EL3`
`mikmod` Red Hat:enterprise_linux:4::as	All versions	`0:3.1.6-32.EL4`
`mikmod-debuginfo` Red Hat:enterprise_linux:4::as	All versions	`0:3.1.6-32.EL4`
`mikmod-devel` Red Hat:enterprise_linux:4::as	All versions	`0:3.1.6-32.EL4`
`mikmod` Red Hat:enterprise_linux:4::desktop	All versions	`0:3.1.6-32.EL4`
`mikmod-debuginfo` Red Hat:enterprise_linux:4::desktop	All versions	`0:3.1.6-32.EL4`
`mikmod-devel` Red Hat:enterprise_linux:4::desktop	All versions	`0:3.1.6-32.EL4`
`mikmod` Red Hat:enterprise_linux:4::es	All versions	`0:3.1.6-32.EL4`
`mikmod-debuginfo` Red Hat:enterprise_linux:4::es	All versions	`0:3.1.6-32.EL4`
`mikmod-devel` Red Hat:enterprise_linux:4::es	All versions	`0:3.1.6-32.EL4`
`mikmod` Red Hat:enterprise_linux:4::ws	All versions	`0:3.1.6-32.EL4`
`mikmod-debuginfo` Red Hat:enterprise_linux:4::ws	All versions	`0:3.1.6-32.EL4`
`mikmod-devel` Red Hat:enterprise_linux:4::ws	All versions	`0:3.1.6-32.EL4`

Products include Miod Vallat Mikmod.

How do I fix CVE-2003-0427?

Upgrade to a fixed version.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2003-0427 being exploited?

There is no known exploitation of CVE-2003-0427 in the wild and no public exploit code.

CVE-2006-3879 Integer overflow in n/a Medium 5.0

Sources

Also known as DEBIAN-CVE-2003-0427, DSA-320, GHSA-3mcf-r5g4-57jg, RHSA-2005:506.