CVE-2006-3931: Buffer overflow in the daemon function in midirecord.cc in Tuomas Airaksinen Midirecord 2.0 allows local us...

Security readout for executives and security teams

CVE-2006-3931 is a local buffer overflow in Tuomas Airaksinen Midirecord 2.0. A long filename argument could allow code execution. Business urgency depends heavily on whether Midirecord is installed and whether it runs setuid or with elevated privileges. Exposure is likely limited to systems with Midirecord 2.0 installed. Risk is materially higher where the binary is setuid, setgid, or invoked by privileged automation. The source bundle does not identify broader affected versions, distributions, or CPEs. Treat this as a legacy local privilege risk. It is not a broad emergency from the supplied evidence, but setuid deployments should be remediated promptly because local code execution could become privilege escalation. Mitigation focus: Inventory systems for Midirecord 2.0 or packaged variants.; Remove Midirecord where it is not operationally required.; Ensure the Midirecord binary is not setuid or setgid..

Prepared

Jun 29, 2026, 11:12 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.