CVE-2003-0577

Description

mpg123 0.59r allows remote attackers to cause a denial of service and possibly execute arbitrary code via an MP3 file with a zero bitrate, which creates a negative frame size.

How to fix CVE-2003-0577

To remediate CVE-2003-0577, upgrade the affected package to a fixed version below.

• Debian/mp3gain—upgrade to 1.5.2-r2-6 or later
• Debian/mpg123—upgrade to 0.59r-1 or later

Is CVE-2003-0577 being exploited?

Low — EPSS is 3.7%, meaning exploitation activity has not been observed at scale.

Affected packages (2)

• from 0, < 1.5.2-r2-6
• from 0, < 0.59r-1

References (1)

• ADVISORYsecurity-tracker.debian.org/tracker/CVE-2003-0577