CVE

Id
28658  
CVE No.
CVE-2007-5301  
Status
Candidate  
Description
Buffer overflow in the vorbis_stream_info function in input/vorbis/vorbis_engine.c (aka the vorbis input plugin) in AlsaPlayer before 0.99.80-rc3 allows remote attackers to execute arbitrary code via a .OGG file with long comments.  
Phase
Assigned (20071009)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
298632 28658 CVE-2007-5301 BUGTRAQ:20080409 [CVE-2007-5301] alsaplayer PoC - exploit  View
298633 28658 CVE-2007-5301 URL:http://www.securityfocus.com/archive/1/archive/1/490671/100/0/threaded  View
298634 28658 CVE-2007-5301 MILW0RM:5424  View
298635 28658 CVE-2007-5301 URL:http://www.milw0rm.com/exploits/5424  View
298636 28658 CVE-2007-5301 MISC:http://www.wekk.net/research/CVE-2007-5301/CVE-2007-5301-exploit.sh  View
298637 28658 CVE-2007-5301 CONFIRM:http://sourceforge.net/forum/forum.php?forum_id=742584  View
298638 28658 CVE-2007-5301 CONFIRM:http://sourceforge.net/project/shownotes.php?release_id=544663&group_id=249  View
298639 28658 CVE-2007-5301 DEBIAN:DSA-1538  View
298640 28658 CVE-2007-5301 URL:http://www.debian.org/security/2008/dsa-1538  View
298641 28658 CVE-2007-5301 BID:25969  View
298642 28658 CVE-2007-5301 URL:http://www.securityfocus.com/bid/25969  View
298643 28658 CVE-2007-5301 VUPEN:ADV-2007-3393  View
298644 28658 CVE-2007-5301 URL:http://www.vupen.com/english/advisories/2007/3393  View
298645 28658 CVE-2007-5301 SECUNIA:27117  View
298646 28658 CVE-2007-5301 URL:http://secunia.com/advisories/27117  View
298647 28658 CVE-2007-5301 SECUNIA:29680  View
298648 28658 CVE-2007-5301 URL:http://secunia.com/advisories/29680  View
298649 28658 CVE-2007-5301 XF:alsaplayer-vorbis-input-bo(36996)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
57501 JVNDB-2007-006193 SnewsCMS Rus の news_page.php におけるクロスサイトスクリプティングの脆弱性 SnewsCMS Rus の news_page.php には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2007-5303 28658 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-006193.html  View