Back to search
CVE-2007-5301
Published: Oct 9, 2007
Modified: Aug 7, 2024
PUBLISHED
Description
Buffer overflow in the vorbis_stream_info function in input/vorbis/vorbis_engine.c (aka the vorbis input plugin) in AlsaPlayer before 0.99.80-rc3 allows remote attackers to execute arbitrary code via a .OGG file with long comments.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
DSA-1538
vendor-advisory
x_refsource_DEBIAN
25969
vdb-entry
x_refsource_BID
27117
third-party-advisory
x_refsource_SECUNIA
5424
exploit
x_refsource_EXPLOIT-DB
alsaplayer-vorbis-input-bo(36996)
vdb-entry
x_refsource_XF
20080409 [CVE-2007-5301] alsaplayer PoC - exploit
mailing-list
x_refsource_BUGTRAQ
29680
third-party-advisory
x_refsource_SECUNIA
http://sourceforge.net/forum/forum.php?forum_id=742584
x_refsource_CONFIRM
ADV-2007-3393
vdb-entry
x_refsource_VUPEN
http://sourceforge.net/project/shownotes.php?release_id=544663&group_id=249
x_refsource_CONFIRM
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now