7.5
CVSSv2

CVE-2003-0577

Published: 18/08/2003 Updated: 10/09/2008
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 668
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

mpg123 0.59r allows remote malicious users to cause a denial of service and possibly execute arbitrary code via an MP3 file with a zero bitrate, which creates a negative frame size.

Vulnerable Product Search on Vulmon Subscribe to Product

mpg123 mpg123 0.59r

mpg123 mpg123 pre0.59s

Vendor Advisories

Debian Bug report logs - #740268 mp3gain: A malformed mp3 file allows arbitrary code execution Package: mp3gain; Maintainer for mp3gain is Scott Hardin <scottnhardin@gmailcom>; Source for mp3gain is src:mp3gain (PTS, buildd, popcon) Reported by: Gustavo Grieco <gustavogrieco@gmailcom> Date: Thu, 27 Feb 2014 16:48: ...