CVE-2007-5301

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

10.24%

Published

Oct 9, 2007

Modified

Jun 16, 2026

Public PoC / Exploit (3)

All weaponized →

Exploit-DBAlsaPlayer 0.99.x - Vorbis Input Plugin OGG Processing Remote Buffer Overflow Exploit-DBAlsaPlayer < 0.99.80-rc3 - Vorbis Input Local Buffer Overflow TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Buffer overflow in the vorbis_stream_info function in input/vorbis/vorbis_engine.c (aka the vorbis input plugin) in AlsaPlayer before 0.99.80-rc3 allows remote attackers to execute arbitrary code via a .OGG file with long comments.

Weaknesses (CWE)

CWE-119

Affected Products (1)

alsaplayer · alsaplayervulnerable

References (20)

http://secunia.com/advisories/27117

Vendor Advisory

http://secunia.com/advisories/29680

http://sourceforge.net/forum/forum.php?forum_id=742584

http://sourceforge.net/project/shownotes.php?release_id=544663&group_id=249

http://www.debian.org/security/2008/dsa-1538

http://www.securityfocus.com/archive/1/490671/100/0/threaded

http://www.securityfocus.com/bid/25969

http://www.vupen.com/english/advisories/2007/3393

http://www.wekk.net/research/CVE-2007-5301/CVE-2007-5301-exploit.sh

https://exchange.xforce.ibmcloud.com/vulnerabilities/36996

https://www.exploit-db.com/exploits/5424