CVE-2003-0865
NoneCVSS
—
EPSS
14.5%
Published
Nov 17, 2003
CISA due date
—
The record
Heap-based buffer overflow in readstring of httpget.c for mpg123 0.59r and 0.59s allows remote attackers to execute arbitrary code via a long request.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | mpg123 | 0 | 0.59r-15 |
| Debian:12 | mpg123 | 0 | 0.59r-15 |
| Debian:13 | mpg123 | 0 | 0.59r-15 |
| Debian:3.0 | mpg123 | 0 | 0.59r-13woody2 |
Related vulnerabilities
- CVE-2024-10573 An out-of-bounds write flaw was found in mpg123 when handling crafted streams. Also affects mpg123
- CVE-2017-11126 The III_i_stereo function in libmpg123/layer3.c in mpg123 through 1.25.1 allows remote… Also affects mpg123
- CVE-2004-1284 Buffer overflow in the find_next_file function in playlist.c for mpg123 0.59r allows… Also affects mpg123