cve/2009/CVE-2009-1894.md

CVE-2009-1894

Description

Race condition in PulseAudio 0.9.9, 0.9.10, and 0.9.14 allows local users to gain privileges via vectors involving creation of a hard link, related to the application setting LD_BIND_NOW to 1, and then calling execv on the target of the /proc/self/exe symlink.

POC

Reference

• http://www.akitasecurity.nl/advisory.php?id=AK20090602
• https://bugzilla.redhat.com/show_bug.cgi?id=510071

Github

No PoCs found on GitHub currently.