CyberSec.Space Logo
Back to CVE Browser

CVE-2003-0577

HIGH
7.5
CVSS Severity Score
EPSS Score0.0740%
EPSS Percentile23.73th
PublishedAug 18, 2003
Last ModifiedApr 16, 2026

Vulnerability Description

mpg123 0.59r allows remote attackers to cause a denial of service and possibly execute arbitrary code via an MP3 file with a zero bitrate, which creates a negative frame size.

Affected Platforms (CPE)

📦
Mpg123

Mpg123

= 0.59r
📦
Mpg123

Mpg123

= pre0.59s

References & Advisories

🔗 ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Server/CSSA-2004-002.0/CSSA-2004-002.0.txt
🔗 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000695
🔗 http://secunia.com/advisories/7875
🔗 http://www.mandriva.com/security/advisories?name=MDKSA-2003:078
🔗 http://www.securityfocus.com/archive/1/306903
🔗 http://www.securityfocus.com/bid/6629
🔗 ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Server/CSSA-2004-002.0/CSSA-2004-002.0.txt
🔗 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000695

Related Vulnerabilities

CVE-2009-130110.0

Integer signedness error in the store_id3_text function in the ID3v2 code in mpg123 before 1.7.2 allows remote attackers to cause ...

CVE-2004-098210.0

Buffer overflow in the getauthfromURL function in httpget.c in mpg123 pre0.59s and mpg123 0.59r could allow remote attackers or lo...

CVE-2004-128410.0

Buffer overflow in the find_next_file function in playlist.c for mpg123 0.59r allows remote attackers to execute arbitrary code vi...

CVE-2017-128398.3

A heap-based buffer over-read in the getbits function in src/libmpg123/getbits.h in mpg123 through 1.25.5 allows remote attackers ...