Buffer overflow in the vorbis_stream_info function in input/vorbis/vorbis_engine.c (aka the vorbis input plugin) in AlsaPlayer before 0.99.80-rc3 allows remote attackers to execute arbitrary code via a .OGG file with long comments.
- https://www.exploit-db.com/exploits/5424
- https://github.com/mudongliang/LinuxFlaw
- https://github.com/oneoy/cve-