CVE-2006-4089
- State
- Published
- Severity
- Not scored
- Published
- Aug 11, 2006
- Updated
- Aug 7, 2024
- Reserved
- Aug 10, 2006
Description
Multiple buffer overflows in Andy Lo-A-Foe AlsaPlayer 0.99.76 and earlier allow remote attackers to cause a denial of service (application crash), or have other unknown impact, via (1) a long Location field sent by a web server, which triggers an overflow in the reconnect function in reader/http/http.c; (2) a long URL sent by a web server when AlsaPlayer is seeking a media file for the playlist, which triggers overflows in new_list_item and CbUpdated in interface/gtk/PlaylistWindow.cpp; and (3) a long response sent by a CDDB server, which triggers an overflow in cddb_lookup in input/ccda/cdda_engine.c.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 19450vdb-entry
- 27883vdb-entry
- 1356third-party-advisory
- 27885vdb-entry
- 27884vdb-entry
- 21749third-party-advisory
- alsaplayer-reconnect-bo(28306)vdb-entry
- 22018third-party-advisory
- 20060809 Multiple buffer-overflows in AlsaPlayer 0.99.76mailing-list
- http://aluigi.altervista.org/adv/alsapbof-adv.txt
- 21422third-party-advisory
- GLSA-200608-24vendor-advisory
- SUSE-SR:2006:021vendor-advisory
- DSA-1179vendor-advisory
- alsaplayer-cddblookup-bo(28308)vdb-entry
- alsaplayer-gtkplaylist-bo(28307)vdb-entry
- ADV-2006-3235vdb-entry
- 20060809 Multiple buffer-overflows in AlsaPlayer 0.99.76mailing-list
- 21639third-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.