AlsaPlayer buffer overflow
Published:		10.04.2008
Source:		BUGTRAQ
SecurityVulns ID:		8888
Type:		client
Level:		5/10
Description:		Buffer overflow on oversized .ogg comment.

CVE:

CVE-2007-5301 (Buffer overflow in the vorbis_stream_info function in input/vorbis/vorbis_engine.c (aka the vorbis input plugin) in AlsaPlayer before 0.99.80-rc3 allows remote attackers to execute arbitrary code via a .OGG file with long comments.)

Original document

Albert Sellarès, [CVE-2007-5301] alsaplayer PoC - exploit (10.04.2008)

Files:		Exploit for alsaplayer before 0.99.80-rc3
Discuss:		Read or add your comments to this news (0 comments)