CVE-2004-0991

CVE-2004-0991 describes a critical buffer overflow vulnerability in mpg123 versions prior to 0.59s-r9, impacting mpg123 and SUSE Linux distributions. This flaw allows remote attackers to execute arbitrary code by crafting malicious MP2 or MP3 file frame headers. With a CVSS score of 7.5, it represents a high-severity risk, requiring no authentication and low attack complexity, potentially leading to complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation, public exploit code, or inclusion in the KEV catalog, the vulnerability has garnered significant community discussion, indicating awareness and potential for future exploitation.