CyberSec.Space Logo
Back to CVE Browser

CVE-2003-0865

HIGH
7.5
CVSS Severity Score
EPSS Score0.0780%
EPSS Percentile44.34th
PublishedNov 17, 2003
Last ModifiedApr 16, 2026

Vulnerability Description

Heap-based buffer overflow in readstring of httpget.c for mpg123 0.59r and 0.59s allows remote attackers to execute arbitrary code via a long request.

Affected Platforms (CPE)

📦
Mpg123

Mpg123

= 0.59r
📦
Mpg123

Mpg123

= 0.59s

References & Advisories

🔗 ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Server/CSSA-2004-002.0/CSSA-2004-002.0.txt
🔗 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000781
🔗 http://marc.info/?l=bugtraq&m=106493686331198&w=2
🔗 http://www.debian.org/security/2004/dsa-435
🔗 http://www.securityfocus.com/archive/1/338641
🔗 http://www.securityfocus.com/bid/8680
🔗 ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Server/CSSA-2004-002.0/CSSA-2004-002.0.txt
🔗 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000781

Related Vulnerabilities

CVE-2009-130110.0

Integer signedness error in the store_id3_text function in the ID3v2 code in mpg123 before 1.7.2 allows remote attackers to cause ...

CVE-2004-098210.0

Buffer overflow in the getauthfromURL function in httpget.c in mpg123 pre0.59s and mpg123 0.59r could allow remote attackers or lo...

CVE-2004-128410.0

Buffer overflow in the find_next_file function in playlist.c for mpg123 0.59r allows remote attackers to execute arbitrary code vi...

CVE-2017-128398.3

A heap-based buffer over-read in the getbits function in src/libmpg123/getbits.h in mpg123 through 1.25.5 allows remote attackers ...