CVE-2004-0991: Buffer Overflow
Published Jan 11, 2005
·Updated
Buffer overflow in mpg123 before 0.59s-r9 allows remote attackers to execute arbitrary code via frame headers in MP2 or MP3 files.
Affected Software
15 affected components
mpg123 mpg123=0.59m
mpg123 mpg123=0.59n
mpg123 mpg123=0.59o
mpg123 mpg123=0.59p
mpg123 mpg123=0.59q
mpg123 mpg123=0.59r
mpg123 mpg123=0.59s
SUSE SuSE Linux=8.0
SUSE SuSE Linux=8.0
SUSE SuSE Linux=8.1
SUSE SuSE Linux=8.2
SUSE SuSE Linux=9.0
SUSE SuSE Linux=9.0
SUSE SuSE Linux=9.1
SUSE SuSE Linux=9.2
Remediation
Patch Available
Event History
Jan 11, 2005
CVE Published
05:00 AM
Jan 19, 2005
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-0991?
CVE-2004-0991 is classified as a high-severity vulnerability due to its potential for arbitrary code execution.
2
How do I fix CVE-2004-0991?
To fix CVE-2004-0991, upgrade mpg123 to a version that is not vulnerable, specifically any version after 0.59s-r9.
3
Who is affected by CVE-2004-0991?
CVE-2004-0991 affects users of mpg123 versions 0.59m, 0.59n, 0.59o, 0.59p, 0.59q, 0.59r, and 0.59s, as well as certain versions of SUSE Linux.
4
What type of vulnerability is CVE-2004-0991?
CVE-2004-0991 is a buffer overflow vulnerability that can allow remote attackers to execute arbitrary code.
5
When was CVE-2004-0991 discovered?
CVE-2004-0991 was discovered in 2004 and is considered a legacy vulnerability in the context of modern software.