[brianl703]

There was a buffer overflow in mpg123. A specially crafted mp3 file could execute code with the priveleges of the user that mpg123 was running as.

[Dimensio]

Good thing that I never run xmms as root or with superuser privs, as the best that it could accomplish is wipe out any files that I own (none of which are system critical). Of course, this would be assuming that your OS or your MP3 playback software is vulnerable to a buffer overflow attack.