CVEs-PoC/2007/CVE-2007-5301.md

CVE-2007-5301

Description

Buffer overflow in the vorbis_stream_info function in input/vorbis/vorbis_engine.c (aka the vorbis input plugin) in AlsaPlayer before 0.99.80-rc3 allows remote attackers to execute arbitrary code via a .OGG file with long comments.

POC

Reference

• https://www.exploit-db.com/exploits/5424

Github

• https://github.com/mudongliang/LinuxFlaw
• https://github.com/oneoy/cve-