Some vulnerabilities have been reported in AlsaPlayer, which potentially can be exploited by malicious people to compromise a user's system.

The vulnerabilities are caused due to boundary errors in the vorbis input plug-in when processing .OGG files. These can be exploited to cause buffer overflows via a specially crafted .OGG file with overly long comments.

Successful exploitation may allow execution of arbitrary code.

Solution
The vendor has released 0.99.80-rc3, which fixes the vulnerabilities.
Further details available to Secunia VIM customers

Provided and/or discovered by
The vendor credits Erik Sjölund.

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://sourceforge.net/project/shownotes.php?release_id=544663&group_id=249

Deep Links
Links available to Secunia VIM customers