CVE-2004-0805 - CVE House
Back to Database
Status published High CVE-2004-0805

Buffer overflow in layer2.c in mpg123 0.59r and possibly mpg123...

Vulnerability Description

Buffer overflow in layer2.c in mpg123 0.59r and possibly mpg123 0.59s allows remote attackers to execute arbitrary code via a certain (1) mp3 or (2) mp2 file.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2004-0805

Credits & Attribution

No credits recorded in the NVD database.

References

More from mpg123

View All →
CVE-2017-9545
The next_text function in src/libmpg123/id3.c in mpg123 1.24.0 allows remote...
Medium 5.5
CVE-2017-12839
A heap-based buffer over-read in the getbits function in src/libmpg123/getbits.h...
High 8.3
CVE-2017-12797
Integer overflow in the INT123_parse_new_id3 function in the ID3 parser...
Medium 5.5
CVE-2017-11126
The III_i_stereo function in libmpg123/layer3.c in mpg123 through 1.25.1 allows...
Medium 5.5
CVE-2017-10683
In mpg123 1.25.0, there is a heap-based buffer over-read in...
High 7.5

Affected Vendor

Affected Software

mpg123, mandrake linux, mandrake linux corporate server
Vulnerable Versions:
0.59r, 0.59s, 9.2, 10.0, 2.1

Timeline

Official Publish: October 20th, 2004
Last Modified: August 8th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.