CVE-2002-1896

ALTO 7.2CVE-2002-1896 · Published 31/12/2002 · updated 16/06/2026

En resumen

CVE-2002-1896 es una vulnerabilidad ALTO (CVSS 7.2) que afecta a alsaplayer (alsaplayer).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.6%, mayor que el 75.6% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
alsaplayer alsaplayer	`= 0.99.71`	No fix yet

Description

Buffer overflow in Alsaplayer 0.99.71, when installed setuid root, allows local users to execute arbitrary code via a long (1) -f or (2) -o command line argument.

References

alsaplayer.org/changelog.php3 · Patch
cvs.sourceforge.net/viewcvs.py/alsaplayer/alsaplayer/app/Main.cpp.diff · Patch
lists.grok.org.uk/pipermail/full-disclosure/2002-September/001730.html · Patch
iss.net/security_center/static/10157.php · Patch
securityfocus.com/bid/5767 · Exploit

Más vulnerabilidades de alsaplayer

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free