IRIX soundplayer program allows local users to gain privileges by including shell metacharacters in a .wav file, which is executed via the midikeys program.
#!/bin/sh
#source: wwwsecurityfocuscom/bid/909/info
#
#SGI's Irix operating system ships with an X11 application called 'soundplayer' which is used to play WAV files It is not setuid root by itself, but can inherit root privileges if called by midikeys (which is setuid on some old IRIX systems) Soundplayer is vulnerable to an input vali ...
Vulmon