Lucene search

K
freebsdFreeBSD32D38CBB-2632-11DC-94DA-0016179B2DD5
HistoryJun 05, 2007 - 12:00 a.m.

flac123 -- stack overflow in comment parsing

2007-06-0500:00:00
vuxml.freebsd.org
14

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.171 Low

EPSS

Percentile

96.1%

isecpartners reports:

flac123, also known as flac-tools, is vulnerable
to a buffer overflow in vorbis comment parsing.
This allows for the execution of arbitrary code.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchflac123< 0.0.10UNKNOWN

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.171 Low

EPSS

Percentile

96.1%