AlsaPlayer: multiple buffer overflows [LWN.net]

Package(s):

alsaplayer

CVE #(s):

CVE-2006-4089

Created:

August 28, 2006

Updated:

September 19, 2006

Description:

AlsaPlayer contains three buffer overflows: in the function that handles the HTTP connections, the GTK interface, and the CDDB querying mechanism. An attacker could exploit the first vulnerability by enticing a user to load a malicious URL resulting in the execution of arbitrary code with the permissions of the user running AlsaPlayer.

Alerts:

Debian	DSA-1179-1	2006-09-19
Gentoo	200608-24	2006-08-26

(Log in to post comments)