CVE-2004-0805: Mandrakesoft Mandrake Linux

High severity, CVSS 7.5. EPSS: 3.8% chance of exploitation in the next 30 days.

Buffer overflow in layer2.c in mpg123 0.59r and possibly mpg123 0.59s allows remote attackers to execute arbitrary code via a certain (1) mp3 or (2) mp2 file.

Affected products

• Mandrakesoft Mandrake Linux: version 9.2 only; version 10.0 only
• Mandrakesoft Mandrake Linux Corporate Server: version 2.1 only
• MPG123 MPG123: version 0.59r only; version 0.59s only

Published 2004-12-23. Last modified 2026-06-16.