Vulnerabilities
Misconfiguration
Compliance
CVE Vulnerabilities

CVE-2006-4089

Published: Aug 11, 2006 | Modified: Apr 03, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:N/A:P
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM
Vulnerability-free packages from our partners
root.io logo minimus.io logo echo.ai logo
Additional information
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2006-4089
CWEhttps://cwe.mitre.org/data/definitions/NVD-Other.html

Multiple buffer overflows in Andy Lo-A-Foe AlsaPlayer 0.99.76 and earlier allow remote attackers to cause a denial of service (application crash), or have other unknown impact, via (1) a long Location field sent by a web server, which triggers an overflow in the reconnect function in reader/http/http.c; (2) a long URL sent by a web server when AlsaPlayer is seeking a media file for the playlist, which triggers overflows in new_list_item and CbUpdated in interface/gtk/PlaylistWindow.cpp; and (3) a long response sent by a CDDB server, which triggers an overflow in cddb_lookup in input/ccda/cdda_engine.c.

Affected Software

NameVendorStart VersionEnd Version
AlsaplayerAndy_lo-a-foe*0.99.76 (including)
AlsaplayerUbuntudapper*
AlsaplayerUbuntudevel*
AlsaplayerUbuntuedgy*
AlsaplayerUbuntufeisty*
AlsaplayerUbuntugutsy*
AlsaplayerUbuntuhardy*
AlsaplayerUbuntuintrepid*
AlsaplayerUbuntujaunty*
AlsaplayerUbuntukarmic*

References

Aqua Security is the largest pure-play cloud native security company, providing customers the freedom to innovate and run their businesses with minimal friction. The Aqua Cloud Native Security Platform provides prevention, detection, and response automation across the entire application lifecycle to secure the build, secure cloud infrastructure and secure running workloads wherever they are deployed.
Copyright © 2026 Aqua Security Software Ltd.   Privacy Policy | Terms of Use