CVE-2007-5301
AlsaPlayer < 0.99.80-rc2 - Buffer Overflow in Vorbis Input Plugin
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2007-5301. PoCs published by Albert Sellares, Erik.
AI-analyzed exploit summary This exploit leverages a buffer overflow in alsaplayer via a maliciously crafted OGG file with an overly long TITLE tag. The provided shellcode executes arbitrary code when the file is played, demonstrating remote code execution (RCE).
Description
Buffer overflow in the vorbis_stream_info function in input/vorbis/vorbis_engine.c (aka the vorbis input plugin) in AlsaPlayer before 0.99.80-rc3 allows remote attackers to execute arbitrary code via a .OGG file with long comments.
Exploits (2)
This exploit leverages a buffer overflow in alsaplayer via a maliciously crafted OGG file with an overly long TITLE tag. The provided shellcode executes arbitrary code when the file is played, demonstrating remote code execution (RCE).
The provided text describes a remote buffer overflow vulnerability in AlsaPlayer versions prior to 0.99.80-rc3, which allows arbitrary code execution due to insufficient bounds checking. The exploit details are referenced from a security advisory, but no actual exploit code is included.