Back

CVE-2003-0969

mpg321 0.2.10 allows remote attackers to overwrite memory and possibly execute arbitrary code via an mp3 file that passes certain strings to the printf function, possibly triggering a format string vulnerability.

Published: Jan 20, 2004 Modified: Jun 16, 2026

CVSS Metrics

Affected Products (1)

Vendor Product Version
mpg321 mpg321 0.2.10

GitHub Security Advisory GHSA-4h5r-vjx5-6qc2

mpg321 0.2.10 allows remote attackers to overwrite memory and possibly execute arbitrary code via...

Risk Scores

CVSS Score 7.5 / 10
EPSS Score 2.82%

Top 15% most likely to be exploited

Threat Score 30.8 / 100

Data Sources

NVD EPSS GitHub