Lucene search

K
cve[email protected]CVE-2007-6279
HistoryDec 07, 2007 - 11:46 a.m.

CVE-2007-6279

2007-12-0711:46:00
CWE-399
web.nvd.nist.gov
19
cve-2007-6279
free lossless audio codec
libflac
double free vulnerabilities
remote code execution
user-assisted
nvd

7.9 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.098 Low

EPSS

Percentile

94.8%

Multiple double free vulnerabilities in Free Lossless Audio Codec (FLAC) libFLAC before 1.2.1 allow user-assisted remote attackers to execute arbitrary code via malformed (1) Seektable values or (2) Seektable Data Offsets in a .FLAC file.

CPENameOperatorVersion
flac:libflacflac libflacle1.2

7.9 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.098 Low

EPSS

Percentile

94.8%

Related for CVE-2007-6279