7.5
CVSSv2

CVE-2004-0805

Published: 23/12/2004 Updated: 11/07/2017
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 668
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

Buffer overflow in layer2.c in mpg123 0.59r and possibly mpg123 0.59s allows remote malicious users to execute arbitrary code via a certain (1) mp3 or (2) mp2 file.

Vulnerable Product Search on Vulmon Subscribe to Product

mpg123 mpg123 0.59r

mpg123 mpg123 0.59s

mandrakesoft mandrake linux 9.2

mandrakesoft mandrake linux corporate server 2.1

mandrakesoft mandrake linux 10.0

Vendor Advisories

Debian Bug report logs - #740268 mp3gain: A malformed mp3 file allows arbitrary code execution Package: mp3gain; Maintainer for mp3gain is Scott Hardin <scottnhardin@gmailcom>; Source for mp3gain is src:mp3gain (PTS, buildd, popcon) Reported by: Gustavo Grieco <gustavogrieco@gmailcom> Date: Thu, 27 Feb 2014 16:48: ...