Skip to content
Noroxi

mpg123 records

16 published records for vendor mpg123.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
8
With a fix record
100%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 19

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

16 records
  • CVE-2004-1284
    44Plan

    Buffer overflow in the find_next_file function in playlist.c for mpg123 0.59r allows remote attackers to execute arbitrary code via a crafte

    CriticalCVSS 10.0Proof of conceptEPSS 14%

    mpg123 · mpg123Jan 10, 2005

  • CVE-2004-0982
    42Plan

    Buffer overflow in the getauthfromURL function in httpget.c in mpg123 pre0.59s and mpg123 0.59r could allow remote attackers or local users

    CriticalCVSS 10.0No exploitEPSS 6%

    mpg123 · mpg123Feb 9, 2005

  • CVE-2009-1301
    42Plan

    Integer signedness error in the store_id3_text function in the ID3v2 code in mpg123 before 1.7.2 allows remote attackers to cause a denial o

    CriticalCVSS 10.0No exploitEPSS 5%

    mpg123 · mpg123Apr 16, 2009

  • CVE-2003-0865
    34Monitor

    Heap-based buffer overflow in readstring of httpget.c for mpg123 0.59r and 0.59s allows remote attackers to execute arbitrary code via a lon

    HighCVSS 7.5Proof of conceptEPSS 14%

    mpg123 · mpg123Nov 17, 2003

  • CVE-2017-12839
    34Monitor

    A heap-based buffer over-read in the getbits function in src/libmpg123/getbits.h in mpg123 through 1.25.5 allows remote attackers to cause a

    HighCVSS 8.3No exploitEPSS 2%

    mpg123 · mpg123May 9, 2019

  • CVE-2006-3355
    32Monitor

    Heap-based buffer overflow in httpdget.c in mpg123 before 0.59s-rll allows remote attackers to execute arbitrary code via a long URL, which

    HighCVSS 7.5Proof of conceptEPSS 6%

    mpg123 · mpg123Jul 6, 2006

  • CVE-2004-0805
    31Monitor

    Buffer overflow in layer2.c in mpg123 0.59r and possibly mpg123 0.59s allows remote attackers to execute arbitrary code via a certain (1) mp

    HighCVSS 7.5No exploitEPSS 3%

    mpg123 · mpg123Dec 23, 2004

  • CVE-2003-0577
    31Monitor

    mpg123 0.59r allows remote attackers to cause a denial of service and possibly execute arbitrary code via an MP3 file with a zero bitrate, w

    HighCVSS 7.5No exploitEPSS 3%

    mpg123 · mpg123Aug 18, 2003

  • CVE-2004-0991
    31Monitor

    Buffer overflow in mpg123 before 0.59s-r9 allows remote attackers to execute arbitrary code via frame headers in MP2 or MP3 files.

    HighCVSS 7.5No exploitEPSS 3%

    mpg123 · mpg123Jan 11, 2005

  • CVE-2014-9497
    31Monitor

    Buffer overflow in mpg123 before 1.18.0.

    HighCVSS 7.5No exploitEPSS 2%

    mpg123 · mpg123Aug 29, 2017

  • CVE-2017-10683
    30Monitor

    In mpg123 1.25.0, there is a heap-based buffer over-read in the convert_latin1 function in libmpg123/id3.c.

    HighCVSS 7.5No exploitEPSS 1%

    mpg123 · mpg123Jun 29, 2017

  • CVE-2006-1655
    26Monitor

    Multiple buffer overflows in mpg123 0.59r allow user-assisted attackers to trigger a segmentation fault and possibly have other impacts via

    MediumCVSS 6.5No exploitEPSS 1%

    mpg123 · mpg123Apr 6, 2006

  • CVE-2017-11126
    22Monitor

    The III_i_stereo function in libmpg123/layer3.c in mpg123 through 1.25.1 allows remote attackers to cause a denial of service (buffer over-r

    MediumCVSS 5.5No exploitEPSS 1%

    mpg123 · mpg123Jul 9, 2017

  • CVE-2017-12797
    22Monitor

    Integer overflow in the INT123_parse_new_id3 function in the ID3 parser in mpg123 before 1.25.5 on 32-bit platforms allows remote attackers

    MediumCVSS 5.5No exploitEPSS 1%

    mpg123 · mpg123Aug 29, 2017

  • CVE-2017-9545
    22Monitor

    The next_text function in src/libmpg123/id3.c in mpg123 1.24.0 allows remote attackers to cause a denial of service (buffer over-read) via a

    MediumCVSS 5.5No exploitEPSS 1%

    mpg123 · mpg123Jul 27, 2017

  • CVE-2007-0578
    17Monitor

    The http_open function in httpget.c in mpg123 before 0.64 allows remote attackers to cause a denial of service (infinite loop) by closing th

    MediumCVSS 4.3No exploitEPSS 1%

    mpg123 · mpg123Jan 30, 2007