CVE-2002-1896

Alsaplayer - Buffer Overflow

Title source: rule

Description

Buffer overflow in Alsaplayer 0.99.71, when installed setuid root, allows local users to execute arbitrary code via a long (1) -f or (2) -o command line argument.

Exploits (1)

exploitdb WORKING POC VERIFIED

by zillion · clocallinux

https://www.exploit-db.com/exploits/21814

View Code ZIP pw:eip

References (5)

[Exploit, Patch] http://www.securityfocus.com/bid/5767

[Patch] http://www.iss.net/security_center/static/10157.php

[Patch] http://alsaplayer.org/changelog.php3

[Patch] http://lists.grok.org.uk/pipermail/full-disclosure/2002-September/001730.html

[Patch] http://cvs.sourceforge.net/viewcvs.py/alsaplayer/alsaplayer/app/Main.cpp.diff?r1=1.66&r2=1.67

Scores

EPSS 0.0066

EPSS Percentile 71.1%

Details

Status published

Products (1)

alsaplayer/alsaplayer 0.99.71

Published Dec 31, 2002

Tracked Since Feb 18, 2026