• info
• discussion
• exploit
• solution
• references

MPG123 Layer 2 Frame Header Heap Overflow Vulnerability

mpg123 is prone to a heap-based buffer overflow vulnerability related to handling of layer 2 streams. This issue is exposed when the player loads MP2/MP3 files with malformed header data.

This vulnerability could be exploited to execute arbitrary code in the context of the user running the player.