Known Vulnerabilities for products from Mpg123
Listed below are 16 of the newest known vulnerabilities associated with the vendor "Mpg123".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2017-12839 json | A heap-based buffer over-read in the getbits function in src/libmpg123/getbits.h in mpg123 through 1.25.5 allows remote attac... | 8.3 - HIGH | 2019-05-09 | 2019-05-10 |
| CVE-2017-12797 json | Integer overflow in the INT123_parse_new_id3 function in the ID3 parser in mpg123 before 1.25.5 on 32-bit platforms allows re... | 5.5 - MEDIUM | 2017-08-29 | 2017-09-06 |
| CVE-2017-11126 json | The III_i_stereo function in libmpg123/layer3.c in mpg123 through 1.25.1 allows remote attackers to cause a denial of service... | Not Provided | 2017-07-10 | 2025-04-20 |
| CVE-2017-10683 json | In mpg123 1.25.0, there is a heap-based buffer over-read in the convert_latin1 function in libmpg123/id3.c. A crafted input w... | Not Provided | 2017-06-29 | 2025-04-20 |
| CVE-2017-9545 json | The next_text function in src/libmpg123/id3.c in mpg123 1.24.0 allows remote attackers to cause a denial of service (buffer o... | 5.5 - MEDIUM | 2017-07-27 | 2019-10-03 |
| CVE-2014-9497 json | Buffer overflow in mpg123 before 1.18.0. | 7.5 - HIGH | 2017-08-29 | 2017-09-03 |
| CVE-2009-1301 json | Integer signedness error in the store_id3_text function in the ID3v2 code in mpg123 before 1.7.2 allows remote attackers to c... | Not Provided | 2009-04-16 | 2026-04-23 |
| CVE-2007-0578 json | The http_open function in httpget.c in mpg123 before 0.64 allows remote attackers to cause a denial of service (infinite loop... | Not Provided | 2007-01-30 | 2026-04-23 |
| CVE-2006-3355 json | Heap-based buffer overflow in httpdget.c in mpg123 before 0.59s-rll allows remote attackers to execute arbitrary code via a l... | 7.5 - HIGH | 2006-07-06 | 2008-09-05 |
| CVE-2006-1655 json | Multiple buffer overflows in mpg123 0.59r allow user-assisted attackers to trigger a segmentation fault and possibly have oth... | Not Provided | 2006-04-06 | 2025-04-03 |
| CVE-2004-1284 json | Buffer overflow in the find_next_file function in playlist.c for mpg123 0.59r allows remote attackers to execute arbitrary co... | Not Provided | 2005-01-10 | 2025-04-03 |
| CVE-2004-0991 json | Buffer overflow in mpg123 before 0.59s-r9 allows remote attackers to execute arbitrary code via frame headers in MP2 or MP3 f... | Not Provided | 2005-01-11 | 2025-04-03 |
| CVE-2004-0982 json | Buffer overflow in the getauthfromURL function in httpget.c in mpg123 pre0.59s and mpg123 0.59r could allow remote attackers ... | Not Provided | 2005-02-09 | 2025-04-03 |
| CVE-2004-0805 json | Buffer overflow in layer2.c in mpg123 0.59r and possibly mpg123 0.59s allows remote attackers to execute arbitrary code via a... | Not Provided | 2004-12-23 | 2025-04-03 |
| CVE-2003-0865 json | Heap-based buffer overflow in readstring of httpget.c for mpg123 0.59r and 0.59s allows remote attackers to execute arbitrary... | Not Provided | 2003-11-17 | 2025-04-03 |
| CVE-2003-0577 json | mpg123 0.59r allows remote attackers to cause a denial of service and possibly execute arbitrary code via an MP3 file with a ... | Not Provided | 2003-08-18 | 2025-04-03 |
Known software with vulnerabilities from Mpg123
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Mpg123 | Mpg123 | 0.59 |