Buffer overflows in mpg321 before 0.2.9 allows local and possibly remote attackers to execute arbitrary code via a long URL to (1) a command line option, (2) an HTTP request, or (3) an FTP request.
| Software | From | Fixed in |
|---|---|---|
| mpg321 / mpg321 | 0.2.3 | 0.2.3.x |
| mpg321 / mpg321 | 0.2.2 | 0.2.2.x |
| mpg321 / mpg321 | 0.2.9 | 0.2.9.x |