| Package | Affected versions | Patched versions |
|---|---|---|
| alsaplayer | ≤ 0.99.80-rc2 |
Buffer overflow in the vorbis_stream_info function in input/vorbis/vorbis_engine.c (aka the vorbis input plugin) in AlsaPlayer before 0.99.80-rc3 allows remote attackers to execute arbitrary code via a .OGG file with long comments.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free