CVE-2007-5301: Alsaplayer

Medium severity, CVSS 6.8. EPSS: 10.2% chance of exploitation in the next 30 days.

Buffer overflow in the vorbis_stream_info function in input/vorbis/vorbis_engine.c (aka the vorbis input plugin) in AlsaPlayer before 0.99.80-rc3 allows remote attackers to execute arbitrary code via a .OGG file with long comments.

Affected products

• Alsaplayer Alsaplayer: up to and including 0.99.80-rc2

Published 2007-10-09. Last modified 2026-06-16.