CVE-2003-0865

Heap-based buffer overflow in readstring of httpget.c for mpg123 0.59r and 0.59s allows remote attackers to execute arbitrary code via a long request...

DEBIAN-CVE-2003-0865

Heap-based buffer overflow in readstring of httpget.c for mpg123 0.59r and 0.59s allows remote attackers to execute arbitrary code via a long request...

CVE-2003-0865

CVE-2003-0865 describes a heap-based buffer overflow in mpg123’s readstring() within httpget.c that could allow remote code execution via a crafted HTTP response. The issue affected mpg123 0.59r and 0.59s and has been fixed in later releases across distributions (e.g., Debian DSA-435-1 for mpg123...

CVE-2003-0865

Heap-based buffer overflow in readstring of httpget.c for mpg123 0.59r and 0.59s allows remote attackers to execute arbitrary code via a long request...

CVE-2003-0865

Heap-based buffer overflow in readstring of httpget.c for mpg123 0.59r and 0.59s allows remote attackers to execute arbitrary code via a long request...

Buffer overflow in mpg123

Buffer overflow on HTTP server reply parsing...

mpg123[v0.59r,v0.59s]: remote client-side heap corruption exploit.

did an audit of mpg123my mp3 player of choice, found a remotely exploitable bug in audio streaming servicehttpget.c; applies to v0.59r and v0.59spre, up to current as of writing this. the exploit comments explain how it works and how to find the memory addresses neededif not already a target valu...

MPG123 0.59 - Remote File Play Heap Corruption

MPG123 0.59 - Remote File Play Heap Corruption // source: https://www.securityfocus.com/bid/8680/info A problem in the handling of some types of remote files has been reported in mpg123. Because of this, it may be possible for a remote attacker to execute arbitrary code with the privileges of the...

MPG123 0.59 - Remote File Play Heap Corruption

// source: https://www.securityfocus.com/bid/8680/info A problem in the handling of some types of remote files has been reported in mpg123. Because of this, it may be possible for a remote attacker to execute arbitrary code with the privileges of the mpg123 user. / mpg123v0.59r,v0.59s: remote...

CVE-2003-0577

mpg123 0.59r allows remote attackers to cause a denial of service and possibly execute arbitrary code via an MP3 file with a zero bitrate, which creates a negative frame size...

DEBIAN-CVE-2003-0577

mpg123 0.59r allows remote attackers to cause a denial of service and possibly execute arbitrary code via an MP3 file with a zero bitrate, which creates a negative frame size...

mpg123 buffer overflow

The mpg123 software version 0.59r contains a buffer overflow vulnerability which may permit the execution of arbitrary code as the owner of the mpg123 process...

CVE-2003-0577

CVE-2003-0577 affects mpg123 0.59r, where parsing an MP3 file with zero bitrate can trigger a negative frame size, enabling remote denial of service and potentially arbitrary code execution. The provided documents confirm the vulnerability and affected software but do not specify a patched versio...

CVE-2003-0577

mpg123 0.59r allows remote attackers to cause a denial of service and possibly execute arbitrary code via an MP3 file with a zero bitrate, which creates a negative frame size...

CVE-2003-0577

mpg123 0.59r allows remote attackers to cause a denial of service and possibly execute arbitrary code via an MP3 file with a zero bitrate, which creates a negative frame size...

mpg123 vulnerabilities

In 2003, two vulnerabilities were discovered in mpg123 that could result in remote code execution when using untrusted input or streaming from an untrusted server...

mpg123 pre0.59s - Invalid MP3 Header Memory Corruption

mpg123 pre0.59s - Invalid MP3 Header Memory Corruption // source: https://www.securityfocus.com/bid/6593/info A memory corruption vulnerability has been reported for mpg123 that may result in code execution. The vulnerability exists when mpg123 is used to play certain MP3 files. Specifically, whe...

mpg123 pre0.59s - Invalid MP3 Header Memory Corruption

// source: https://www.securityfocus.com/bid/6593/info A memory corruption vulnerability has been reported for mpg123 that may result in code execution. The vulnerability exists when mpg123 is used to play certain MP3 files. Specifically, when playing MP3 files with malformed headers, it may be...