cbcvebase.
CVE-2004-0805
published 2004-12-23

CVE-2004-0805: Buffer overflow in layer2.c in mpg123 0.59r and possibly mpg123 0.59s allows remote attackers to execute arbitrary code via a certain (1) mp3 or (2) mp2 file.

PriorityP427high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
3.79%
88.6th percentile
Buffer overflow in layer2.c in mpg123 0.59r and possibly mpg123 0.59s allows remote attackers to execute arbitrary code via a certain (1) mp3 or (2) mp2 file.

Affected

15 ranges
VendorProductVersion rangeFixed in
debianmp3gain< mp3gain 1.5.2-r2-6 (bookworm)mp3gain 1.5.2-r2-6 (bookworm)
debianmpg123< mp3gain 1.5.2-r2-6 (bookworm)mp3gain 1.5.2-r2-6 (bookworm)
mandrakesoftmandrake_linux——
mandrakesoftmandrake_linux——
mandrakesoftmandrake_linux_corporate_server——
mp3gainmp3gain>= 0 < 1.5.2-r2-61.5.2-r2-6
mp3gainmp3gain>= 0 < 1.5.2-r2-61.5.2-r2-6
mp3gainmp3gain>= 0 < 1.5.2-r2-61.5.2-r2-6
mp3gainmp3gain>= 0 < 1.5.2-r2-61.5.2-r2-6
mpg123mpg123——
mpg123mpg123——
mpg123mpg123>= 0 < 0.59r-160.59r-16
mpg123mpg123>= 0 < 0.59r-160.59r-16
mpg123mpg123>= 0 < 0.59r-160.59r-16
mpg123mpg123>= 0 < 0.59r-160.59r-16

CVSS provenance

nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
osv7.5HIGH
vendor_debian7.5LOW
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.