PT-2006-4933 · Alsa · Alsaplayer

Luigi Auriemma · Published 2006-08-11 · Updated 2018-10-17 · CVE-2006-4089

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions AlsaPlayer versions 0.99.76 and earlier

Description The issue is related to multiple buffer overflows that can be triggered by remote attackers, potentially causing a denial of service (application crash) or other unknown impacts. This can occur through various means, including a long Location field sent by a web server, which triggers an overflow in the reconnect function, a long URL sent by a web server when seeking a media file for the playlist, which triggers overflows in new list item and CbUpdated, and a long response sent by a CDDB server, which triggers an overflow in cddb lookup.

Recommendations For AlsaPlayer versions 0.99.76 and earlier, consider disabling the reconnect function in reader/http/http.c, the new list item and CbUpdated functions in interface/gtk/PlaylistWindow.cpp, and the cddb lookup function in input/ccda/cdda engine.c as a temporary workaround until a patch is available. Restrict access to the affected API endpoints, such as those related to web server interactions and CDDB server responses, to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Related Identifiers

CVE-2006-4089

DSA-1179-1

Affected Products

Alsaplayer

References · 24

• 🔥 https://exploit-db.com/exploits/28367 · Exploit
• 🔥 http://securityfocus.com/bid/19450 · Exploit
• https://osv.dev/vulnerability/DEBIAN-CVE-2006-4089 · Vendor Advisory
• http://novell.com/linux/security/advisories/2006_21_sr.html · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200608-24.xml · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2006-4089 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-4089 · Security Note
• http://debian.org/security/2006/dsa-1179 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2006-4089 · Vendor Advisory
• http://aluigi.altervista.org/adv/alsapbof-adv.txt · Note
• http://osvdb.org/27884 · Note
• http://secunia.com/advisories/21749 · Note
• http://secunia.com/advisories/22018 · Note
• http://osvdb.org/27883 · Note
• http://vupen.com/english/advisories/2006/3235 · Note