CVE-2007-4619 Multiple integer overflows in Free Lossless Audio Codec (FLAC) libFLAC before 1.2.1, as used in Winamp before 5.5 and other products, allow user-assisted remote attackers to execute arbitrary code via...
HighCVSS 9.3
EPSS 6.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple integer overflows in Free Lossless Audio Codec (FLAC) libFLAC before 1.2.1, as used in Winamp before 5.5 and other products, allow user-assisted remote attackers to execute arbitrary code via a malformed FLAC file that triggers improper memory allocation, resulting in a heap-based buffer overflow.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| flac libflac | <= 1.2 | No fix listed |
| nullsoft winamp | <= 5.35 | No fix listed |
| debian/flac(Debian:12) | < 1.2.1-1 | 1.2.1-1 |
| debian/flac(Debian:13) | < 1.2.1-1 | 1.2.1-1 |
| debian/flac(Debian:14) | < 1.2.1-1 | 1.2.1-1 |
References
- bugzilla.redhat.com
- flac.sourceforge.net patch
- 20071011 Multiple Vendor FLAC Library Multiple Integer Overflow Vulnerabilities third-party-advisory
- SUSE-SR:2007:022 vendor-advisory
- 27210 third-party-advisory
- 27223 third-party-advisory
- 27355 third-party-advisory
- 27399 third-party-advisory
- 27507 third-party-advisory
- 27601 third-party-advisory
- 27625 third-party-advisory
- 27628 third-party-advisory
- 27780 third-party-advisory
- 27878 third-party-advisory
- 28548 third-party-advisory
- GLSA-200711-15 vendor-advisory
- 1018815 vdb-entry
- wiki.rpath.com
- DSA-1469 vendor-advisory
- MDKSA-2007:214 vendor-advisory
- RHSA-2007:0975 vendor-advisory
- 26042 patch vdb-entry
- USN-540-1 vendor-advisory
- ADV-2007-3483 vdb-entry
- ADV-2007-3484 vdb-entry
- ADV-2007-4061 vdb-entry
- bugzilla.redhat.com
- flac-media-files-bo(37187) vdb-entry
- issues.rpath.com
- oval:org.mitre.oval:def:10571 signature vdb-entry
- FEDORA-2007-2596 vendor-advisory
- Debian Security Tracker CVE-2007-4619 vendor-advisory