CVEs-PoC/2002/CVE-2002-1896.md

CVE-2002-1896

Description

Buffer overflow in Alsaplayer 0.99.71, when installed setuid root, allows local users to execute arbitrary code via a long (1) -f or (2) -o command line argument.

POC

Reference

• http://cvs.sourceforge.net/viewcvs.py/alsaplayer/alsaplayer/app/Main.cpp.diff?r1=1.66&r2=1.67

Github

• https://github.com/mudongliang/LinuxFlaw
• https://github.com/oneoy/cve-