Gentoo: GLSA 200907-13 High: PulseAudio Local Privilege Escalation

Gentoo Linux Security Advisory GLSA 200907-13 https://security.gentoo.org/ Severity: High Title: PulseAudio: Local privilege escalation Date: July 16, 2009 Bugs: #276986 ID: 200907-13

Synopsis ======= A vulnerability in PulseAudio may allow a local user to execute code with escalated privileges.
Background ========= PulseAudio is a network-enabled sound server with an advanced plug-in system.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 media-sound/pulseaudio < 0.9.9-r54 >= 0.9.9-r54
========== Tavis Ormandy and Julien Tinnes of the Google Security Team discovered that the pulseaudio binary is installed setuid root, and does not drop privileges before re-executing...