MP
Product
Mpg123
16
CVEs
0
On KEV
8.3
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 3Low 0
Watch
Add Mpg123 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-12839 | 8.3 | May 9 | A heap-based buffer over-read in the getbits function in src/libmpg123/getbits.h in mpg123 through 1.25.5 allows remote attackers to cause a possible denial-of-service… Affected: through 1.25.5 |
| CVE-2014-9497 | 7.5 | Aug 29 | Buffer overflow in mpg123 before 1.18.0 Affected: through 1.17.0 |
| CVE-2017-10683 | 7.5 | Jun 29 | In mpg123 1.25.0, there is a heap-based buffer over-read in the convert_latin1 function in libmpg123/id3.c Affected: 1.25.0 |
| CVE-2017-12797 | 5.5 | Aug 29 | Integer overflow in the INT123_parse_new_id3 function in the ID3 parser in mpg123 before 1.25.5 on 32-bit platforms allows remote attackers to cause a denial of service via a… Affected: through 1.25.4 |
| CVE-2017-9545 | 5.5 | Jul 27 | The next_text function in src/libmpg123/id3.c in mpg123 1.24.0 allows remote attackers to cause a denial of service (buffer over-read) via a crafted mp3 file Affected: 1.24.0 |
| CVE-2017-11126 | 5.5 | Jul 10 | The III_i_stereo function in libmpg123/layer3.c in mpg123 through 1.25.1 allows remote attackers to cause a denial of service (buffer over-read and application crash) via a… Affected: through 1.25.1 |
| CVE-2009-1301 | – | Apr 16 | Integer signedness error in the store_id3_text function in the ID3v2 code in mpg123 before 1.7.2 allows remote attackers to cause a denial of service (out-of-bounds memory access)… Affected: through 1.7.1; 0.59m; 0.59n; 0.59o; 0.59p; 0.59q; +8 more |
| CVE-2007-0578 | – | Jan 30 | The http_open function in httpget.c in mpg123 before 0.64 allows remote attackers to cause a denial of service (infinite loop) by closing the HTTP connection early Affected: 0.59m; 0.59n; 0.59o; 0.59p; 0.59q; 0.59r; +5 more |
| CVE-2006-3355 | – | Jul 6 | Heap-based buffer overflow in httpdget.c in mpg123 before 0.59s-rll allows remote attackers to execute arbitrary code via a long URL, which is not properly terminated before being… Affected: pre0.59s_r11 |
| CVE-2006-1655 | – | Apr 6 | Multiple buffer overflows in mpg123 0.59r allow user-assisted attackers to trigger a segmentation fault and possibly have other impacts via a certain MP3 file, as demonstrated by… Affected: 0.59r |
| CVE-2004-0982 | – | Feb 9 | Buffer overflow in the getauthfromURL function in httpget.c in mpg123 pre0.59s and mpg123 0.59r could allow remote attackers or local users to execute arbitrary code via an mp3… Affected: 0.59r; pre0.59s |
| CVE-2004-0991 | – | Jan 11 | Buffer overflow in mpg123 before 0.59s-r9 allows remote attackers to execute arbitrary code via frame headers in MP2 or MP3 files Affected: 0.59m; 0.59n; 0.59o; 0.59p; 0.59q; 0.59r; +1 more |
| CVE-2004-1284 | – | Jan 10 | Buffer overflow in the find_next_file function in playlist.c for mpg123 0.59r allows remote attackers to execute arbitrary code via a crafted MP3 playlist Affected: 0.59m; 0.59n; 0.59o; 0.59p; 0.59q; 0.59r; +1 more |
| CVE-2004-0805 | – | Dec 23 | Buffer overflow in layer2.c in mpg123 0.59r and possibly mpg123 0.59s allows remote attackers to execute arbitrary code via a certain (1) mp3 or (2) mp2 file Affected: 0.59r; 0.59s |
| CVE-2003-0865 | – | Nov 17 | Heap-based buffer overflow in readstring of httpget.c for mpg123 0.59r and 0.59s allows remote attackers to execute arbitrary code via a long request Affected: 0.59r; 0.59s |
| CVE-2003-0577 | – | Aug 18 | mpg123 0.59r allows remote attackers to cause a denial of service and possibly execute arbitrary code via an MP3 file with a zero bitrate, which creates a negative frame size Affected: 0.59r; pre0.59s |
Showing 16