CVE-2006-1655

published 2006-04-06

CVE-2006-1655: Multiple buffer overflows in mpg123 0.59r allow user-assisted attackers to trigger a segmentation fault and possibly have other impacts via a certain MP3 file…

Priority P4 19 medium 6.5 CVSS 2.0

AV N AC L Au S C P I P A P

Multiple buffer overflows in mpg123 0.59r allow user-assisted attackers to trigger a segmentation fault and possibly have other impacts via a certain MP3 file, as demonstrated by mpg1DoS3. NOTE: this issue might be related to CVE-2004-0991, but it is not clear.

Affected

11 ranges

Vendor	Product	Version range	Fixed in
debian	mp3gain	< mp3gain 1.5.2-r2-6 (bookworm)	mp3gain 1.5.2-r2-6 (bookworm)
debian	mpg123	< mp3gain 1.5.2-r2-6 (bookworm)	mp3gain 1.5.2-r2-6 (bookworm)
mp3gain	mp3gain	>= 0 < 1.5.2-r2-6	1.5.2-r2-6
mp3gain	mp3gain	>= 0 < 1.5.2-r2-6	1.5.2-r2-6
mp3gain	mp3gain	>= 0 < 1.5.2-r2-6	1.5.2-r2-6
mp3gain	mp3gain	>= 0 < 1.5.2-r2-6	1.5.2-r2-6
mpg123	mpg123	—	—
mpg123	mpg123	>= 0 < 0.59r-22	0.59r-22
mpg123	mpg123	>= 0 < 0.59r-22	0.59r-22
mpg123	mpg123	>= 0 < 0.59r-22	0.59r-22
mpg123	mpg123	>= 0 < 0.59r-22	0.59r-22

CVSS provenance

nvd v2.0 6.5 MEDIUM AV:N/AC:L/Au:S/C:P/I:P/A:P

osv 7.5 HIGH

vendor_debian 7.5 LOW

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.