CVE-2007-6278

2007-12-0711:00:00

mitre

www.cve.org

AI Score

6.6

Confidence

High

EPSS

0.016

Percentile

87.5%

JSON

Free Lossless Audio Codec (FLAC) libFLAC before 1.2.1 allows user-assisted remote attackers to force a client to download arbitrary files via the MIME-Type URL flag (–>) for the FLAC image file in a crafted .FLAC file.

References

research.eeye.com/html/advisories/published/AD20071115.html

securityreason.com/securityalert/3423

www.kb.cert.org/vuls/id/544656

www.securityfocus.com/archive/1/483765/100/200/threaded

www.securitytracker.com/id?1018974