AlsaPlayer 0.99.x - Multiple Buffer Overflow Vulnerabilities

Author: Luigi Auriemma
type: dos
platform: linux
port: 
date_added: 2006-08-09 
date_updated: 2013-09-24 
verified: 1 
codes: CVE-2006-4089;OSVDB-27883 
tags: 
aliases:  
screenshot_url:  
application_url: 

source: https://www.securityfocus.com/bid/19450/info

AlsaPlayer is prone to multiple buffer-overflow vulnerabilities because the application fails to check the size of the data before copying it into a finite-sized internal memory buffer.

An attacker can exploit these issues to execute arbitrary code within the context of the application or cause a denial-of-service condition.

AlsaPlayer 0.99.76, the CVS version as of 9 Aug 2006, and prior versions are vulnerable to this issue; other versions may also be affected.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/28367.zip