CVE-2003-0865

A remote attacker can send a long request to the mpg123 client when it attempts to read from a remote host, such as an HTTP audio streaming service. The `readstring` function, used in this context, does not utilize its `maxlen` argument, allowing it to write beyond the allocated buffer. This can lead to heap corruption and arbitrary code execution [ref_id=1].

The vulnerability exists in the `readstring` function, located in `httpget.c`. This function is responsible for reading strings from remote hosts and is used in conjunction with the `*request` buffer, which is allocated to 1024 bytes [ref_id=1].

The advisory indicates that the `readstring` function in `httpget.c` does not properly limit the amount of data written to a buffer. A quick fix suggested involves modifying the `while(1)` loop to `while(maxlen>pos)`, ensuring that the `maxlen` argument is respected and preventing buffer overflows [ref_id=1].