Lucene search

K
cve[email protected]CVE-2007-4619
HistoryOct 12, 2007 - 9:17 p.m.

CVE-2007-4619

2007-10-1221:17:00
CWE-189
web.nvd.nist.gov
28
cve-2007-4619
flace
libflac
winamp
integer overflow
arbitrary code execution
remote attack
memory allocation
buffer overflow

7.3 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.515 Medium

EPSS

Percentile

97.6%

Multiple integer overflows in Free Lossless Audio Codec (FLAC) libFLAC before 1.2.1, as used in Winamp before 5.5 and other products, allow user-assisted remote attackers to execute arbitrary code via a malformed FLAC file that triggers improper memory allocation, resulting in a heap-based buffer overflow.

References

7.3 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.515 Medium

EPSS

Percentile

97.6%