Bartlomiej Sieka has reported a vulnerability in mpg123, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to a boundary error in the "find_next_file()" function within the playlist handling and can be exploited to cause a buffer overflow via a specially crafted playlist.

Successful exploitation allows execution of arbitrary code, but requires that a user is tricked into opening a malicious playlist with the "--list" command line option.

The vulnerability has been reported in version 0.59r. Other versions may also be affected.

Solution
Update to version 0.65.

Provided and/or discovered by
Bartlomiej Sieka

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://tigger.uic.edu/~jlongs2/holes/mpg123.txt

Deep Links
Links available to Secunia VIM customers