Carlos Barros

Name of the Vulnerable Software and Affected Versions: mpg123 versions prior to 0.59s mpg123 version 0.59r Description: The issue is related to a buffer overflow in the getauthfromURL function, which could allow remote attackers or local users to execute arbitrary code. This can be achieved via an mp3 file containing a long string before the @ (at sign) in a URL. Recommendations: For mpg123 versions prior to 0.59s, update to a version that fixes the buffer overflow issue in the getauthfromURL function. For mpg123 version 0.59r, update to a version that fixes the buffer overflow issue in the getauthfromURL function.