This host is running mpg123 Player which is prone to denial of service vulnerability.

Successful exploitation will let the attacker trigger out of bounds memory access and thus execute arbitrary code and possibly crash the application. Impact level: Application

Update to version 1.7.2 http://www.mpg123.de/download.shtml

This flaw is due to integer signedness error in the store_id3_text function in the ID3v2 code when processing ID3v2 tags with negative encoding values.

mpg123 Player prior to 1.7.2 on Linux.

• http://secunia.com/advisories/34587
• http://www.vupen.com/english/advisories/2009/0936

---

Updated on 2015-03-25