CVE-2003-0969
mpg321 0.2.10 allows remote attackers to overwrite memory and possibly execute arbitrary code via...
CVE-2003-0969 is a high vulnerability (CVSS 7.5) in Mpg321, published January 5, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.82%, the 86th percentile. Fixed in mpg321 0.2.10.3.
- Severity
- 7.5 HighCVSS 2.0, NVD
- Exploit chance
- 2.82%EPSS, 86th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
0.2.10.3mpg321 +3 more
Description
mpg321 0.2.10 allows remote attackers to overwrite memory and possibly execute arbitrary code via an mp3 file that passes certain strings to the printf function, possibly triggering a format string vulnerability.
Exploit likelihood
Affected products
Affected packages
What each source reports
NVD Score used
mpg321 0.2.10 allows remote attackers to overwrite memory and possibly execute arbitrary code via an mp3 file that passes certain strings to the printf function, possibly triggering a format string vulnerability.
- Record
CVE-2003-0969- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE ListNo score
mpg321 0.2.10 allows remote attackers to overwrite memory and possibly execute arbitrary code via an mp3 file that passes certain strings to the printf function, possibly triggering a format string vulnerability.
- Record
CVE-2003-0969- Updated
- 2026-11-02
EUVDEUVD-2003-0959No score
mpg321 0.2.10 allows remote attackers to overwrite memory and possibly execute arbitrary code via an mp3 file that passes certain strings to the printf function, possibly triggering a format string vulnerability.
- Record
EUVD-2003-0959- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-4h5r-vjx5-6qc2No score
mpg321 0.2.10 allows remote attackers to overwrite memory and possibly execute arbitrary code via...
mpg321 0.2.10 allows remote attackers to overwrite memory and possibly execute arbitrary code via an mp3 file that passes certain strings to the printf function, possibly triggering a format string vulnerability.
- Record
GHSA-4h5r-vjx5-6qc2- Updated
- 2026-11-02
OSVNo score
mpg321 0.2.10 allows remote attackers to overwrite memory and possibly execute arbitrary code via an mp3 file that passes certain strings to the printf function, possibly triggering a format string vulnerability.
- Record
CVE-2003-0969- Updated
- 2026-11-02
OSVDEBIAN-CVE-2003-0969No score
mpg321 0.2.10 allows remote attackers to overwrite memory and possibly execute arbitrary code via an mp3 file that passes certain strings to the printf function, possibly triggering a format string vulnerability.
- Record
DEBIAN-CVE-2003-0969- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
exchange.xforce.ibmcloud.com/vulnerabilities/14148
novell.com/linux/security/advisories/2004_02_tcpdump.html
osvdb.org/3331
securityfocus.com/bid/9364
debian.org/security/2004/dsa-411
nvd.nist.gov/vuln/detail/CVE-2003-0969
github.com/advisories/GHSA-4h5r-vjx5-6qc2
security-tracker.debian.org/tracker/CVE-2003-0969