CVE-2003-0577
Fixed in a distro release EPSS 4%
mpg123 0.59r allows remote attackers to cause a denial of service and possibly execute arbitrary code via an MP3 file with a zero bitrate, which creates a negative frame size.
Products: mpg123
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | mp3gain | 1.5.2-r2-6 |
| Debian 12 | mpg123 | 0.59r-1 |
| Debian 13 | mp3gain | 1.5.2-r2-6 |
| Debian 13 | mpg123 | 0.59r-1 |
| Debian 14 | mp3gain | 1.5.2-r2-6 |
| Debian 14 | mpg123 | 0.59r-1 |