Approved changes feed: RSS · Atom

cpe:2.3:a:alsaplayer:alsaplayer:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAlsaplayer (3eeca804-17ae-5e7a-a56c-5c59542b3a1d)
ProductAlsaplayer (511e37dc-493b-59fc-b3b6-dd4bb9c60a8c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/alsaplayer/alsaplayer purl2cpe 2026-06-01 10:13:15.600731
pkg:sourceforge/alsaplayer purl2cpe 2026-06-01 10:13:15.600733

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2007-5301 vulnerable 2026-06-08 04:50:04.830894 Details available
Buffer overflow in the vorbis_stream_info function in input/vorbis/vorbis_engine.c (aka the vorbis input plugin) in AlsaPlayer before 0.99.80-rc3 allows remote attackers to execute arbitrary code via a .OGG file with long comments.
Published: 2007-10-09T18:00:00.000Z
Updated: 2024-08-07T15:24:42.441Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.