| Package | Affected versions | Patched versions |
|---|---|---|
| mpg123 | = 0.59m= 0.59n= 0.59o= 0.59p= 0.59q= 0.59r= 0.59s= 0.62= 1.6.3= 1.6.4= 1.7.0= pre0.59s= pre0.59s_r11≤ 1.7.1 |
Integer signedness error in the store_id3_text function in the ID3v2 code in mpg123 before 1.7.2 allows remote attackers to cause a denial of service (out-of-bounds memory access) and possibly execute arbitrary code via an ID3 tag with a negative encoding value. NOTE: some of these details are obtained from third party information.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free