CVE-2007-0578: MPG123

Medium severity, CVSS 4.3. EPSS: 1.5% chance of exploitation in the next 30 days.

The http_open function in httpget.c in mpg123 before 0.64 allows remote attackers to cause a denial of service (infinite loop) by closing the HTTP connection early.

Affected products

• MPG123 MPG123: version 0.59m only; version 0.59n only; version 0.59o only; version 0.59p only; version 0.59q only; version 0.59r only; …

Published 2007-01-30. Last modified 2026-06-16.