CVE-2014-9028
- EPSS 25.74%
- Veröffentlicht 26.11.2014 15:59:08
- Zuletzt bearbeitet 12.04.2025 10:46:40
Heap-based buffer overflow in stream_decoder.c in libFLAC before 1.3.1 allows remote attackers to execute arbitrary code via a crafted .flac file.
CVE-2014-8962
- EPSS 14.65%
- Veröffentlicht 26.11.2014 15:59:07
- Zuletzt bearbeitet 12.04.2025 10:46:40
Stack-based buffer overflow in stream_decoder.c in libFLAC before 1.3.1 allows remote attackers to execute arbitrary code via a crafted .flac file.
CVE-2007-6277
- EPSS 18.12%
- Veröffentlicht 07.12.2007 11:46:00
- Zuletzt bearbeitet 09.04.2025 00:30:58
Multiple buffer overflows in Free Lossless Audio Codec (FLAC) libFLAC before 1.2.1 allow user-assisted remote attackers to execute arbitrary code via large (1) Metadata Block Size, (2) VORBIS Comment String Size, (3) Picture Metadata MIME-TYPE Size, ...
CVE-2007-6278
- EPSS 1.14%
- Veröffentlicht 07.12.2007 11:46:00
- Zuletzt bearbeitet 09.04.2025 00:30:58
Free Lossless Audio Codec (FLAC) libFLAC before 1.2.1 allows user-assisted remote attackers to force a client to download arbitrary files via the MIME-Type URL flag (-->) for the FLAC image file in a crafted .FLAC file.
CVE-2007-6279
- EPSS 3.06%
- Veröffentlicht 07.12.2007 11:46:00
- Zuletzt bearbeitet 09.04.2025 00:30:58
Multiple double free vulnerabilities in Free Lossless Audio Codec (FLAC) libFLAC before 1.2.1 allow user-assisted remote attackers to execute arbitrary code via malformed (1) Seektable values or (2) Seektable Data Offsets in a .FLAC file.
CVE-2007-4619
- EPSS 7.86%
- Veröffentlicht 12.10.2007 21:17:00
- Zuletzt bearbeitet 09.04.2025 00:30:58
Multiple integer overflows in Free Lossless Audio Codec (FLAC) libFLAC before 1.2.1, as used in Winamp before 5.5 and other products, allow user-assisted remote attackers to execute arbitrary code via a malformed FLAC file that triggers improper memo...