Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2004-1284

Buffer overflow in the find_next_file function in playlist.c for mpg123 0.59r allows remote attackers to execute arbitrary code via a crafted MP3 playlist.

Published

2005-01-10T05:00:00.000

Last Modified

2025-04-03T01:03:51.193

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 10.0 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

10.0

Impact Score

10.0

Weaknesses
  • Type: Primary
    NVD-CWE-Other
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application mpg123 mpg123 0.59m Yes
Application mpg123 mpg123 0.59n Yes
Application mpg123 mpg123 0.59o Yes
Application mpg123 mpg123 0.59p Yes
Application mpg123 mpg123 0.59q Yes
Application mpg123 mpg123 0.59r Yes
Application mpg123 mpg123 pre0.59s Yes
References