CVE-2000-0013

This exploit leverages a command injection vulnerability in SGI Irix's 'soundplayer' application, which can be triggered via 'midikeys' (a setuid binary). The PoC compiles a C program to spawn a setuid shell, then guides the user to exploit the vulnerability by saving a file with a malicious filename.