Sponsored link
Serve your customers, not your servers, with VERIO Linux VPS. Full-access test-drive here.
| Weekly edition | Kernel | Security | Distributions | Search |
| Archives | Calendar | Subscribe | Write for LWN | LWN.net FAQ |
alsaplayer: arbitrary code execution
| Package(s): | alsaplayer | CVE #(s): | CVE-2007-5301 | |||
| Created: | April 7, 2008 | Updated: | April 9, 2008 | |||
| Description: | From the Debian advisory: Erik Sjölund discovered a buffer overflow vulnerability in the Ogg Vorbis input plugin of the alsaplayer audio playback application. Successful exploitation of this vulnerability through the opening of a maliciously-crafted Vorbis file could lead to the execution of arbitrary code. | |||||
| Alerts: |
| |||||
(Log in to post comments)