Buffer overflow in the find_next_file function in playlist.c for mpg123 0.59r allows remote attackers to execute arbitrary code via a crafted MP3 playlist.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Mpg123 | Mpg123 | 0.59m (including) | 0.59m (including) |
| Mpg123 | Mpg123 | 0.59n (including) | 0.59n (including) |
| Mpg123 | Mpg123 | 0.59o (including) | 0.59o (including) |
| Mpg123 | Mpg123 | 0.59p (including) | 0.59p (including) |
| Mpg123 | Mpg123 | 0.59q (including) | 0.59q (including) |
| Mpg123 | Mpg123 | 0.59r (including) | 0.59r (including) |
| Mpg123 | Mpg123 | pre0.59s (including) | pre0.59s (including) |
| Mpg123 | Ubuntu | dapper | * |
| Mpg123 | Ubuntu | devel | * |
| Mpg123 | Ubuntu | edgy | * |
| Mpg123 | Ubuntu | feisty | * |