CVE-2004-0805

CVE-2004-0805 describes a buffer overflow vulnerability in mpg123 versions 0.59r and potentially 0.59s, specifically within the layer2.c component, affecting various Mandrake Linux distributions. This flaw allows remote attackers to execute arbitrary code by supplying a specially crafted MP3 or MP2 file. With a CVSS score of 7.5, this vulnerability is considered high severity due to its network-based attack vector, low attack complexity, and potential for complete compromise of confidentiality, integrity, and availability. While no active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion has been identified, organizations using affected mpg123 versions should still consider patching.