Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Whats

#40215of 53,624
6.8Total CVSS
Vulnerabilities · 1
PT-2007-6374
6.8
2007-10-09
Alsa · Alsaplayer · CVE-2007-5301
Name of the Vulnerable Software and Affected Versions: AlsaPlayer versions prior to 0.99.80-rc3 Description: The issue is related to a buffer overflow in the `vorbis stream info` function, which can be triggered by a .OGG file containing long comments. This allows remote attackers to execute arbitrary code. Recommendations: For versions prior to 0.99.80-rc3, update to version 0.99.80-rc3 or later to resolve the issue. As a temporary workaround, consider avoiding the use of .OGG files with long comments until the update is applied.