CVE-2003-0969
mpg321 0.2.10 allows remote attackers to overwrite memory and possibly execute arbitrary code via...
mpg321 0.2.10 allows remote attackers to overwrite memory and possibly execute arbitrary code via an mp3 file that passes certain strings to the printf function, possibly triggering a format string vulnerability.
Exploit likelihood
What each source reports
NVD Score used
mpg321 0.2.10 allows remote attackers to overwrite memory and possibly execute arbitrary code via an mp3 file that passes certain strings to the printf function, possibly triggering a format string vulnerability.
- Record
CVE-2003-0969- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
mpg321 0.2.10 allows remote attackers to overwrite memory and possibly execute arbitrary code via an mp3 file that passes certain strings to the printf function, possibly triggering a format string vulnerability.
- Record
CVE-2003-0969- Updated
- 2026-11-02
EUVDEUVD-2003-0959 No score
mpg321 0.2.10 allows remote attackers to overwrite memory and possibly execute arbitrary code via an mp3 file that passes certain strings to the printf function, possibly triggering a format string vulnerability.
- Record
EUVD-2003-0959- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-4h5r-vjx5-6qc2 No score
mpg321 0.2.10 allows remote attackers to overwrite memory and possibly execute arbitrary code via...
mpg321 0.2.10 allows remote attackers to overwrite memory and possibly execute arbitrary code via an mp3 file that passes certain strings to the printf function, possibly triggering a format string vulnerability.
- Record
GHSA-4h5r-vjx5-6qc2- Updated
- 2026-11-02
OSV No score
mpg321 0.2.10 allows remote attackers to overwrite memory and possibly execute arbitrary code via an mp3 file that passes certain strings to the printf function, possibly triggering a format string vulnerability.
- Record
CVE-2003-0969- Updated
- 2026-11-02
OSVDEBIAN-CVE-2003-0969 No score
mpg321 0.2.10 allows remote attackers to overwrite memory and possibly execute arbitrary code via an mp3 file that passes certain strings to the printf function, possibly triggering a format string vulnerability.
- Record
DEBIAN-CVE-2003-0969- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2003-0969 is a high vulnerability (CVSS 7.5) in Mpg321, published January 5, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.82%, the 86th percentile. Fixed in mpg321 0.2.10.3.
References
exchange.xforce.ibmcloud.com/vulnerabilities/14148
novell.com/linux/security/advisories/2004_02_tcpdump.html
osvdb.org/3331
securityfocus.com/bid/9364
debian.org/security/2004/dsa-411
nvd.nist.gov/vuln/detail/CVE-2003-0969
github.com/advisories/GHSA-4h5r-vjx5-6qc2
security-tracker.debian.org/tracker/CVE-2003-0969