CVE-2004-1284: MPG123

High severity, CVSS 10.0. EPSS: 14.5% chance of exploitation in the next 30 days.

Buffer overflow in the find_next_file function in playlist.c for mpg123 0.59r allows remote attackers to execute arbitrary code via a crafted MP3 playlist.

Affected products

• MPG123 MPG123: version 0.59m only; version 0.59n only; version 0.59o only; version 0.59p only; version 0.59q only; version 0.59r only; …

Published 2005-01-10. Last modified 2026-06-16.