CVE-2004-0805

Published: Dec 23, 2004Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Buffer overflow in layer2.c in mpg123 0.59r and possibly mpg123 0.59s allows remote attackers to execute arbitrary code via a certain (1) mp3 or (2) mp2 file.

Affected (8)

Products: Mpg123: Mpg123 · Mandrakesoft: Mandrake Linux, Mandrake Linux Corporate Server

1 product

2 products

Mandrake Linux Corporate Server

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Mpg123 Mpg123	Version 0.59r
Mpg123 Mpg123	Version 0.59s

Configuration B

6 vulnerable

Vulnerable Software	Affected Versions
Mandrakesoft Mandrake Linux	Version 10.0
Mandrakesoft Mandrake Linux	Version 10.0
Mandrakesoft Mandrake Linux	Version 9.2
Mandrakesoft Mandrake Linux	Version 9.2
Mandrakesoft Mandrake Linux Corporate Server	Version 2.1
Mandrakesoft Mandrake Linux Corporate Server	Version 2.1

References (16)

http://lists.grok.org.uk/pipermail/full-disclosure/2004-September/026151.html

Source: cve@mitre.org

http://www.alighieri.org/advisories/advisory-mpg123.txt

Source: cve@mitre.org

http://www.debian.org/security/2004/dsa-564

Source: cve@mitre.org

PatchVendor Advisory

http://www.gentoo.org/security/en/glsa/glsa-200409-20.xml

Source: cve@mitre.org

http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:100

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/374433

Source: cve@mitre.org

http://www.securityfocus.com/bid/11121

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/17287

Source: cve@mitre.org

http://lists.grok.org.uk/pipermail/full-disclosure/2004-September/026151.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.alighieri.org/advisories/advisory-mpg123.txt

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2004/dsa-564

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.gentoo.org/security/en/glsa/glsa-200409-20.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:100

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/374433

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/11121

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/17287

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.