CVE-2004-0982 - CVE House
Back to Database
Status published Critical CVE-2004-0982

Buffer overflow in the getauthfromURL function in httpget.c in mpg123...

Vulnerability Description

Buffer overflow in the getauthfromURL function in httpget.c in mpg123 pre0.59s and mpg123 0.59r could allow remote attackers or local users to execute arbitrary code via an mp3 file that contains a long string before the @ (at sign) in a URL.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2004-0982

Credits & Attribution

No credits recorded in the NVD database.

References

More from mpg123

View All →
CVE-2017-9545
The next_text function in src/libmpg123/id3.c in mpg123 1.24.0 allows remote...
Medium 5.5
CVE-2017-12839
A heap-based buffer over-read in the getbits function in src/libmpg123/getbits.h...
High 8.3
CVE-2017-12797
Integer overflow in the INT123_parse_new_id3 function in the ID3 parser...
Medium 5.5
CVE-2017-11126
The III_i_stereo function in libmpg123/layer3.c in mpg123 through 1.25.1 allows...
Medium 5.5
CVE-2017-10683
In mpg123 1.25.0, there is a heap-based buffer over-read in...
High 7.5

Affected Vendor

Affected Software

mpg123
Vulnerable Versions:
0.59r, pre0.59s

Timeline

Official Publish: November 19th, 2004
Last Modified: August 8th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.