Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

Whats

#39902de 53,633
6.8CVSS total
Vulnerabilidades · 1
PT-2007-6374
6.8
2007-10-09
Alsa · Alsaplayer · CVE-2007-5301
Name of the Vulnerable Software and Affected Versions: AlsaPlayer versions prior to 0.99.80-rc3 Description: The issue is related to a buffer overflow in the `vorbis stream info` function, which can be triggered by a .OGG file containing long comments. This allows remote attackers to execute arbitrary code. Recommendations: For versions prior to 0.99.80-rc3, update to version 0.99.80-rc3 or later to resolve the issue. As a temporary workaround, consider avoiding the use of .OGG files with long comments until the update is applied.