AlsaPlayer 0.99.x - Multiple Buffer Overflow Vulnerabilities



EKU-ID: 33602 CVE: CVE-2006-4089;OSVDB-27883 OSVDB-ID:
Author: Luigi Auriemma Published: 2006-08-09 Verified: Verified
Download:

Rating

☆☆☆☆☆
Home


source: https://www.securityfocus.com/bid/19450/info

AlsaPlayer is prone to multiple buffer-overflow vulnerabilities because the application fails to check the size of the data before copying it into a finite-sized internal memory buffer.

An attacker can exploit these issues to execute arbitrary code within the context of the application or cause a denial-of-service condition.

AlsaPlayer 0.99.76, the CVS version as of 9 Aug 2006, and prior versions are vulnerable to this issue; other versions may also be affected.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/28367.zip