Read the docs

Alsaplayer

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Alsaplayer records in CISA KEV

No Alsaplayer vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

2 records

Priority MEDIUM 43

Buffer overflow in the vorbis_stream_info function in input/vorbis/vorbis_engine.c (aka the vorbis input plugin) in AlsaPlayer before 0.99.80-rc3 allows remote attackers to execute arbitrary code via a .OGG file with lon…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.10238 Published 2007-10-09 No fix listed CWE-119
Open these records in search →