CVE-2004-0982

Publication date 9 February 2005

Last updated 17 July 2025

Ubuntu priority

Medium

Why this priority?

Buffer overflow in the getauthfromURL function in httpget.c in mpg123 pre0.59s and mpg123 0.59r could allow remote attackers or local users to execute arbitrary code via an mp3 file that contains a long string before the @ (at sign) in a URL.

Status

No maintained releases are affected by this CVE.

Package Ubuntu Release Status
mpg123 7.04 feisty
Fixed 0.59r-21
6.10 edgy
Fixed 0.59r-21
6.06 LTS dapper
Fixed 0.59r-21