CVE-2006-1655
Fixed in a distro release EPSS 2%
Multiple buffer overflows in mpg123 0.59r allow user-assisted attackers to trigger a segmentation fault and possibly have other impacts via a certain MP3 file, as demonstrated by mpg1DoS3. NOTE: this issue might be related to CVE-2004-0991, but it is not clear.
Products: mpg123
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | mp3gain | 1.5.2-r2-6 |
| Debian 12 | mpg123 | 0.59r-22 |
| Debian 13 | mp3gain | 1.5.2-r2-6 |
| Debian 13 | mpg123 | 0.59r-22 |
| Debian 14 | mp3gain | 1.5.2-r2-6 |
| Debian 14 | mpg123 | 0.59r-22 |
| Debian 3.1 | mpg123 | 0.59r-20sarge1 |