
	Where results make sense

Topic: Mpg123

	Mpg123 - Wikipedia, the free encyclopedia
		mpg123 appeared after the first MP3 player for UNIX, MAPlay, and quickly came into widespread use, as it relied heavily on assembler optimizations to perform the iDCT part of the MPEG decoding quicker than any other MP3 player.
		The development of mpg123 has ceased and there are some serious security holes that are not fixed.
		However, its core is still being used by a number of projects such as foobar2000 or in_mpg123.
	en.wikipedia.org /wiki/Mpg123 (205 words)

	Mpg123 -- Facts, Info, and Encyclopedia article (Site not responding. Last check: 2007-10-08)
		Today, mpg123 contains assembler optimizations for almost every popular ((computer science) the part of a computer (a microprocessor chip) that does most of the data processing; the CPU and the memory form the central part of a computer to which the peripherals are attached) CPU on the market.
		The license of the mpg123 player is (Click link for more info and facts about GPL) GPL and the license of the mpglib inside the mpg123 package is (Click link for more info and facts about LGPL) LGPL.
		The development of mpg123 had ceased and there are some serious security holes in mpg123 that were not fixed.
	www.absoluteastronomy.com /encyclopedia/m/mp/mpg123.htm (250 words)

	Gentoo Linux Documentation -- mpg123: Buffer overflow vulnerability
		mpg123 decoding routines contain a buffer overflow bug that might lead to arbitrary code execution.
		mpg123 contains a buffer overflow in the code that handles layer2 decoding of media files.
		An attacker can possibly exploit this bug with a specially-crafted mp3 or mp2 file to execute arbitrary code with the permissions of the user running mpg123.
	www.gentoo.org /security/en/glsa/glsa-200409-20.xml (99 words)

	Linux NetMag - MP3-Player (Site not responding. Last check: 2007-10-08)
		mpg123 is a textbased program and has no graphical surface.
		mpg123 is spread around the world and the programmers concentrate on the surfaces like GQmpeg.
		But if mpg123 looses the contact it can happen that noise appears in the background and which will not disappear once the resources are free again.
	www.linuxnetmag.com /en/issue2/m2mp3play1.html (786 words)

	freshmeat.net: Project details for mpg321
		It is designed to be a drop-in replacement for mpg123, and therefore its interface has been designed around that of mpg123, without using any of its code.
		PS: If mpg321 doesn't support backward list play (mpg123 only supports forwarding as in `#mpg123 -zC .mp3 /*.mp3'), that would be a nice new feature to have other key bound to "backward" and still have `f' to forward though.
		As for quality, both mpg123 and libmad are ISO-compliant decoders, which means that they have very, very high quality, and mad does all decoding completely in fixed-point (integer) operations, which means it's better for CPUs like the StrongARM, which don't have a floating point unit.
	freshmeat.net /projects/mpg321 (1642 words)

	[No title] (Site not responding. Last check: 2007-10-08)
		It should affect almost every OS with mpg123 package installed.
		Description: mpg123 reads one or more files (or standard input if ‘‘-’’ is specified) or URLs and plays them on the audio device (default) or outputs them to stdout.
		The problem: A malicious formatted mp3/2 causes mpg123 to fail header checks, this may allow arbitrary code to be executed with the privilege of the user trying to play the mp3.
	www.alighieri.org /advisories/advisory-mpg123.txt (375 words)

	portaudit: mpg123 -- buffer overflow in URL handling (Site not responding. Last check: 2007-10-08)
		The first buffer overflow can occur when mpg123 parses a URL with a user-name/password field that is more than 256 characters long.
		The second potential buffer overflow may be triggered locally by a specially crafted symlink to the mpg123 binary.
		This problem is not as serious, since mpg123 is not installed setuid by default.
	people.freebsd.org /~eik/portaudit/20d16518-2477-11d9-814e-0001020eed82.html (174 words)

	Mpg123 (Site not responding. Last check: 2007-10-08)
		mpg123 appeared after the first MP3 player UNIX MAPlay and quickly came into widespread as it relied heavily on assembler optimizations to perform the iDCT part of the MPEG decoding quicker any other MP3 player.
		Today mpg123 contains optimizations for almost every popular CPU on the market.
		This makes it the most resource-efficient MP3 player and library is. The core of mpg123 is used XMMS for MP3 playback.
	www.freeglossary.com /Mpg123 (115 words)

	Encyclopedia: Mpg123 (Site not responding. Last check: 2007-10-08)
		MP3 is a popular digital audio encoding and lossy compression format invented and standardised in 1991 by a team of engineers working in the framework of the ISO/IEC MPEG audio committee under the chairmanship of Professor Hans Musmann (University of Hannover - Germany).
		GNU logo The GNU Lesser General Public License (formerly the GNU Library General Public License) is an FSF approved free software license designed as a compromise between the GNU General Public License and simple permissive licenses such as the BSD license and the MIT License.
		Categories: Linux media players MP3 is a popular digital audio encoding and lossy compression format invented and standardised in 1991 by a team of engineers working in the framework of the ISO/IEC MPEG audio committee under the chairmanship of Professor Hans Musmann (University of Hannover - Germany).
	www.nationmaster.com /encyclopedia/Mpg123 (724 words)

	SecuriTeam.com ™ - Buffer Overflow in Mpg123 (getauthfromURL)
		Mpg123 is a real time MPEG Audio Player for Layer 1,2 and Layer3 for the Unix/Linux environment.
		Mpg123 is vulnerable to a buffer overflow in the authentication part of the URL.
		It is not a serious bug because it can be only exploited locally and mpg123 is not SUID by default.
	www.securiteam.com /unixfocus/6J00N0ABFQ.html (304 words)

	[No title] (Site not responding. Last check: 2007-10-08)
		Introduction: mpg123 is a real time MPEG Audio Player for Layer 1,2 and Layer3.
		At line 245 of httpget.c,the prgName variable (mpg123 filename) is appended into the request variable.
		It is not a serious bug cause it can be only exploited locally and mpg123 is not SUID by default.
	barrossecurity.com /advisories/mpg123_getauthfromurl_bof_advisory.txt (362 words)

	ISS X-Force Database: mpg123-readstring-bo(13265): mpg123 readstring function buffer overflow
		mpg123 is a freely available streaming audio player for Linux and most Unix-based operating systems.
		mpg123 versions 0.59r and pre 0.59s are vulnerable to a heap buffer overflow, caused by the readstring function in the httpget.c audio streaming service.
		CVE-2003-0865: Heap-based buffer overflow in readstring of httpget.c for mpg123 0.59r and 0.59s allows remote attackers to execute arbitrary code via a long request.
	xforce.iss.net /xforce/xfdb/13265 (439 words)

	ISS X-Force Database: mpg123-neg-framesize-buffer(11100): mpg123 negative framesize buffer calculation could allow code ...
		mpg123 versions 0.59r and pre0.59s could allow a remote attacker to execute arbitrary code on the system, caused by a vulnerability regarding the calculation of the framesize buffer.
		A remote attacker could create a malicious MP3 file with a bitrate of zero to cause a negative framesize to be calculated, which would allow the attacker to execute arbitrary code on the system.
		CVE-2003-0577: mpg123 0.59r allows remote attackers to cause a denial of service and possibly execute arbitrary code via an MP3 file with a zero bitrate, which creates a negative frame size.
	xforce.iss.net /xforce/xfdb/11100 (475 words)

	Module Documentation - Audio::Play::MPG123 0.62 (Site not responding. Last check: 2007-10-08)
		While the standard mpg123 player can be used to play back mp3's using this module you will encounter random deadlocks, due to bugs in its communication code.
		(In case you wonder, the mpg123 author is not interested in including these fixes and enhancements into mpg123).
		This function should be called regularly, since mpg123 will stop playing when it can't write out events because the perl program is no longer listening...
	aspn.activestate.com /ASPN/CodeDoc/Audio-Play-MPG123/MPG123.html (466 words)

	mpg123 mp3 decoding quality test results
		mpg123 is a linux mp3 player, and is not tested here.
		However, the decoding engine from mpg123 has been ported to Windows in a variety of guises.
		The decoders we tested that used mpg123 code as their source gave excellent results.
	mp3decoders.mp3-tech.org /decoders_mpg123.html (75 words)

	mpg123-0.59r (Site not responding. Last check: 2007-10-08)
		You can optimize the build of mpg123 for your processor.
		There have been problems reported with using optimizations with mpg123; make PREFIX=/usr linux always seems to work.
		mpg123 is used for playing mp3 files via the console.
	cal006031.student.utwente.nl /blfs/multimedia/mpg123.html (74 words)

	Gentoo Linux Documentation -- mpg123: Buffer overflow
		An attacker may be able to execute arbitrary code by way of specially crafted MP2 or MP3 files.
		mpg123 improperly parses frame headers in input streams.
		By inducing a user to play a malicious file, an attacker may be able to exploit a buffer overflow to execute arbitrary code with the permissions of the user running mpg123.
	www.gentoo.org /security/en/glsa/glsa-200501-14.xml (91 words)

	mpg123 Incorrect Framesize Calculation Memory Corruption Vulnerability
		A memory corruption vulnerability has been reported for mpg123 that may result in code execution.
		The vulnerability exists when mpg123 is used to play certain MP3 files.
		It has been reported that when playing MP3 files with a bitrate of zero, mpg123 will incorrectly allocate a negative framesize buffer.
	www.securityfocus.com /bid/6629/discuss (62 words)

	MacOSX - forked.net: mpg123 hickups
		I've been using mpg123 (version pre0.59s) for some days now and after initial problems I actually got it to work ;-) However, what really bugs me, are the playback hickups I get all the time (working on a B&W G3, 448MB RAM).
		I can see that it can't compete with the soundoutput of iTunes or the like (which eat up about 20% of my processor cycles) but isn't there a possibility to increase its 'stability (ie less hickups).
		posted October 20, 2001 07:19 AM the version of mpg123 you were using relies on esd - which, when I run Xfree rootless, and xmms hiccups on me also.
	macosx.forked.net /bbarchive/forum2/000051.html (240 words)

	Audio / Video Tools
		In addition to reading MPEG audio streams from ordinary files and from the standard input, mpg123 supports retrieval of MPEG audio files via the HTTP protocol, which is used in the World Wide Web (WWW).
		mpg123 attempts to open an HTTP connection to the server in order to retrieve that file to decode and play it.
		Also note that mpg123 always generates 16 bit stereo data (if one of the -single* options is used, two identical stereo channels are generated).
	www.sco.com /skunkware/audiovis (2231 words)

	POE: MPG123
		POE Component for accessing and working with mpg123, an mp3 player.
		All events are posted to a session named "mpg123".
		Fired when mpg123 goes away, either as the result of something stupid happening in mpg123 itself or as a result of a "quit" event.
	poe.perl.org /?MPG123 (362 words)

	Dominik Brettnacher - mpg123-mysql
		When playing is interrupted by sending the usual "INT" signal to mpg123, the song gets less points.
		Additionally, mpg123-mysql is able to skip titles with a bad (negative) rating - playlist support: You can tell mpg123 to use your database as the source for your playlist.
		Maybe you'll enjoy his variant of database support for mpg123.
	www.brettnacher.org /users/dominik/index.php3?topic=mpg123-mysql (324 words)

	mpg123, Fast MP3 Player for Linux and UNIX systems
		Propably your waiting for the next release, but I did not manage to apply all patches from my TODO list yet and added a few new bugs that I must hunt down first.
		Just to let you know: I'm still alive and I hope to have some spare time in september to add some patches and test the current CVS version to make a new minor release.
		If you find a player, which claims to be 10 or even more times faster than the current players: just don't believe it.
	www-ti.informatik.uni-tuebingen.de /~hippm/mpg123.html (375 words)

	macosxhints - Install a command-line MP3 player
		Tried placing the sed command after the mpg123 command withing single quotes to get it to run the sed first, but mpg123 seems to be ignoring the results of the sed running.
		I tried to use a '*.mpg' so it would play all files, but it doesn't support that with a full path infront and I didn't want to 'cd' to that library folder because I didn't want to interfere with the default directory where ever the 'rc' file was at that line in the file.
		In future mpg123 version it may support wildcarding in the relative path and then it can play all sound in that folder.
	www.macosxhints.com /article.php?story=2002050108101874 (1530 words)

	X Multimedia System (Site not responding. Last check: 2007-10-08)
		I attempt porting MMX mpeg audio decoder from mpg123 CVS tree.
		However, since some people seems to still have some problems, I suggest that we for the moment leave it disabled by default.
		mpg123 lib seems to crash a lot when compiled with that patch.
	www.xmms.org /plugins.php?details=115 (370 words)

	MDKSA-2004:100: mpg123 Scan - Vulnerability Assessment & Network Security Forums
		If through a vulnerability assessment, a network security issue is detected for the vulnerability below, applying the appropriate security patches in a timely matter is very important.
		The remote host is missing the patch for the advisory MDKSA-2004:100 (mpg123).
		A vulnerability in mpg123 was discovered by Davide Del Vecchio where certain
	www.vulnerabilityscanning.com /MDKSA-2004-100-mpg123-Test_14794.htm (217 words)

	[No title] (Site not responding. Last check: 2007-10-08)
		You are at risk if you use mpg123 --list to take an MP3 playlist from a web page (or any other source that could be controlled by an attacker).
		Of course, when you accept a playlist from someone else, you are running the risk that the playlist will include some of your files, conceivably secret audio files.
		But the mpg123 documentation does not suggest that there is any larger risk.
	tigger.uic.edu /~jlongs2/holes/mpg123.txt (290 words)

	POE: MPG123
		Stop playing the current track and shut down the mpg123 process.
		As noted above, all callbacks are either posted to the session alias given to "spawn()" or "console".
		Suggested use is to either quit gracefully or create a new player.
	poe.perl.org /?action=browse&diff=1&id=MPG123 (370 words)

	Secunia - Advisories - mpg123 Mpeg Layer-2 Buffer Overflow Vulnerability
		Yuri D'Elia has reported a vulnerability in mpg123, which potentially can be exploited by malicious people to compromise a user's system.
		The vulnerability is caused due to an error in the parsing of frame headers for layer-2 streams.
		Successful exploitation may allow execution of arbitrary code with the privileges of the user executing mpg123.
	secunia.com /advisories/13779 (267 words)

Try your search on: Qwika (all wikis)