Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2004-0991

Buffer overflow in mpg123 before 0.59s-r9 allows remote attackers to execute arbitrary code via frame headers in MP2 or MP3 files.

Published

2005-01-11T05:00:00.000

Last Modified

2025-04-03T01:03:51.193

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 7.5 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

10.0

Impact Score

6.4

Weaknesses
  • Type: Primary
    NVD-CWE-Other
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application mpg123 mpg123 0.59m Yes
Application mpg123 mpg123 0.59n Yes
Application mpg123 mpg123 0.59o Yes
Application mpg123 mpg123 0.59p Yes
Application mpg123 mpg123 0.59q Yes
Application mpg123 mpg123 0.59r Yes
Application mpg123 mpg123 0.59s Yes
Operating System suse suse_linux 8.0 Yes
Operating System suse suse_linux 8.0 Yes
Operating System suse suse_linux 8.1 Yes
Operating System suse suse_linux 8.2 Yes
Operating System suse suse_linux 9.0 Yes
Operating System suse suse_linux 9.0 Yes
Operating System suse suse_linux 9.1 Yes
Operating System suse suse_linux 9.2 Yes
References