CVE-2004-1284 Buffer overflow in the find_next_file function in playlist.c for mpg123 0.59r allows remote attackers to execute arbitrary code via a crafted MP3 playlist.
HighCVSS 10.0
EPSS 14.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in the find_next_file function in playlist.c for mpg123 0.59r allows remote attackers to execute arbitrary code via a crafted MP3 playlist.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mpg123 | = 0.59m | No fix listed |
| mpg123 | = 0.59n | No fix listed |
| mpg123 | = 0.59o | No fix listed |
| mpg123 | = 0.59p | No fix listed |
| mpg123 | = 0.59q | No fix listed |
| mpg123 | = 0.59r | No fix listed |
| mpg123 | = pre0.59s | No fix listed |
| debian/mpg123(Debian:12) | < 0.59r-20 | 0.59r-20 |
| debian/mpg123(Debian:13) | < 0.59r-20 | 0.59r-20 |
| debian/mpg123(Debian:14) | < 0.59r-20 | 0.59r-20 |
References
- Debian Security Tracker CVE-2004-1284 vendor-advisory
- bugs.debian.org issue-tracking
- tigger.uic.edu exploit vendor-advisory
- SUSE-SR:2005:001 vendor-advisory
- mpg123-findnextfile-bo(18626) vdb-entry