← Database

CVE-2009-1894

HIGH CVSS: 7.2 Published: 2009-07-17 Modified: 2026-06-16

Description

Race condition in PulseAudio 0.9.9, 0.9.10, and 0.9.14 allows local users to gain privileges via vectors involving creation of a hard link, related to the application setting LD_BIND_NOW to 1, and then calling execv on the target of the /proc/self/exe symlink.

Affected Platforms

Pulseaudio Pulseaudio

Weakness Type

CWE-362

References