CVE-2004-1284
NoneCVSS
—
EPSS
14.5%
Published
Jan 10, 2005
CISA due date
—
The record
Buffer overflow in the find_next_file function in playlist.c for mpg123 0.59r allows remote attackers to execute arbitrary code via a crafted MP3 playlist.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | mpg123 | 0 | 0.59r-20 |
| Debian:12 | mpg123 | 0 | 0.59r-20 |
| Debian:13 | mpg123 | 0 | 0.59r-20 |
Related vulnerabilities
- CVE-2024-10573 An out-of-bounds write flaw was found in mpg123 when handling crafted streams. Also affects mpg123
- CVE-2017-11126 The III_i_stereo function in libmpg123/layer3.c in mpg123 through 1.25.1 allows remote… Also affects mpg123
- CVE-2003-0865 Heap-based buffer overflow in readstring of httpget.c for mpg123 0.59r and 0.59s allows… Also affects mpg123