Secunia

Carlos Barros has reported a vulnerability in mpg123, which potentially can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to a boundary error in the "getauthfromURL()" function when parsing URLs. This can be exploited to cause a buffer overflow when a user e.g. loads a specially crafted playlist containing an overly long URL.

Successful exploitation may potentially allow execution of arbitrary code.

The vulnerability has been reported in versions pre0.59s and 0.59r. Other versions may also be affected.

Solution
Update to version 0.65.

Provided and/or discovered by
Carlos Barros

Changelog
Further details available in Customer Area

Deep Links
Links available in Customer Area