mpg123 contains an overflow condition in the handling of playlists. The issue is due to the 'find_next_file()' function not validating user-supplied input. With a specially crafted playlist, a context-dependent attacker can cause a buffer overflow, resulting in a denial of service or potentially execution of arbitrary code.

It has been reported that this issue has been fixed. Upgrade to version 0.65, or higher, to address this vulnerability.

• Security Tracker: 1012556
• Secunia Advisory ID: 13511 13616
• CVE ID: 2004-1284 (see also: NVD)
• Mail List Post: http://archives.neohapsis.com/archives/bugtraq/2004-12/0195.html
• Other Advisory URL: http://security.gentoo.org/glsa/glsa-200412-22.xml
  http://tigger.uic.edu/~jlongs2/holes/mpg123.txt [ Link is 404 ]
• Vendor URL: http://www.mpg123.de/
• Vendor Specific Advisory URL: http://www.novell.com/linux/security/advisories/2005_01_sr.html

• Bartlomiej Sieka