Bug 1759 – /usr/bin/play is a shell script which can be exploited via mime types

Bug 1759 - /usr/bin/play is a shell script which can be exploited via mime types

Summary:	/usr/bin/play is a shell script which can be exploited via mime types

Status:	CLOSED CURRENTRELEASE

Aliases:	None

Product:	Red Hat Linux
Classification:	Retired
Component:	sox (Show other bugs)
Sub Component:
Version:	6.0
Hardware:	i386 Linux

Priority	high Severity medium
Target Milestone:	---
Target Release:	---
Assigned To:	Mike Maher
QA Contact:
Docs Contact:

URL:
Whiteboard:
Keywords:	Security

Depends On:
Blocks:
	Show dependency tree / graph

Reported:	1999-03-24 16:46 EST by Preston Brown
Modified:	2008-05-01 11:37 EDT (History)
CC List:	1 user (show)

See Also:
Fixed In Version:
Doc Type:	Bug Fix
Doc Text:
Story Points:	---
Clone Of:
Environment:
Last Closed:	1999-04-01 17:37:09 EST
Type:	---
Regression:	---
Mount Type:	---
Documentation:	---
CRM:
Verified Versions:
Category:	---
oVirt Team:	---
RHEL 7.3 requirements from Atomic Host:

Attachments	(Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

Groups: None (edit)

Description Preston Brown 1999-03-24 16:46:38 EST

/usr/bin/play doesn't properly quote its arguments, and when
fed a properly crafted 'audio file', could do some nasty
things to your system as the user it is being run as.

Comment 1 Cristian Gafton 1999-03-24 17:18:59 EST

assigned to mike

Comment 2 Mike Maher 1999-04-01 17:37:59 EST

This problem is fixed and in the tree.

Note You need to log in before you can comment on or make changes to this bug.