915 matches found
flac:fuzzer_decoder: Crash in FLAC__crc16_update_words32
Project: https://github.com/xiph/flac.git Detailed Report: https://oss-fuzz.com/testcase?key=5076189185572864 Project: flac Fuzzing Engine: libFuzzer Fuzz Target: fuzzerdecoder Job Type: libfuzzermsanflac Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x724000010000 Crash State:...
EulerOS Virtualization 3.0.1.0 : flac (EulerOS-SA-2019-1451)
According to the versions of the flac package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A buffer overflow flaw was found in the way flac decoded FLAC audio files. An attacker could create a specially crafted FLAC audio...
Arbitrary Code Executionary
The flac packages contain a decoder and an encoder for the FLAC Free Lossless Audio Codec audio file format. A buffer overflow flaw was found in the way flac decoded FLAC audio files. An attacker could create a specially crafted FLAC audio file that could cause an application using the flac libra...
openSUSE Security Update : flac (openSUSE-2019-1225)
This update for flac fixes the following issues : - CVE-2017-6888: An error in the 'readmetadatavorbiscomment' function could be exploited to cause a memory leak via a specially crafted FLAC file bsc1091045. This update was imported from the SUSE:SLE-15:Update update project. %NASLMINLEVEL 70300 ...
openSUSE: Security Advisory for flac (openSUSE-SU-2019:1225-1)
The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
OPENSUSE-SU-2019:1225-1 Security update for flac
This update for flac fixes the following issues: - CVE-2017-6888: An error in the 'readmetadatavorbiscomment' function could be exploited to cause a memory leak via a specially crafted FLAC file bsc1091045. This update was imported from the SUSE:SLE-15:Update update project...
Security update for flac (low)
openSUSE Security Update: Security update for flac Announcement ID: openSUSE-SU-2019:1225-1 Rating: low References: 1091045 Cross-References: CVE-2017-6888 Affected Products: openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description: This update for flac fixes the...
SUSE SLED15 / SLES15 Security Update : flac (SUSE-SU-2019:0920-1)
This update for flac fixes the following issues : CVE-2017-6888: An error in the 'readmetadatavorbiscomment' function could be exploited to cause a memory leak via a specially crafted FLAC file bsc1091045. Note that Tenable Network Security has extracted the preceding description block directly...
SUSE-SU-2019:0920-1 Security update for flac
This update for flac fixes the following issues: - CVE-2017-6888: An error in the 'readmetadatavorbiscomment' function could be exploited to cause a memory leak via a specially crafted FLAC file bsc1091045...
January 22, 2019âKB4476976 (OS Build 17763.292)
None None...
Arbitrary Code Execution
flac is vulnerable to arbitrary code execution. A stack-based buffer overflow in streamdecoder.c allows an attacker to pass a malicious FLAC audio file to execute arbitrary code or crash the process when the file is read...
Fedora 28 : flac (2018-6a378e32c3)
Security fix for CVE-2017-6888. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 7030...
CVE-2018-11285
In Snapdragon Automobile, Mobile, Wear in version MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SD 845, SDA660, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660,...
Design/Logic Flaw
In Snapdragon Automobile, Mobile, Wear in version MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SD 845, SDA660, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660,...
CVE-2018-11285
In Snapdragon Automobile, Mobile, Wear in version MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SD 845, SDA660, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660,...
CVE-2018-11285: Out-of-bounds Read
In Snapdragon Automobile, Mobile, Wear in version MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SD 845, SDA660, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660,...
Sidify Music Converter 1.2.9 DLL Hijacking
===================================================== Exploit Title : Sidify Music Converter 1.2.9 - DLL Hijacking Code Execution Date Discovered : 2018-19-07 Affected Products: Sidify Music Converter v1.2.9 - Software Exploitation Technique: Local Severity Level: Medium Tested OS : Windows 7 &...
CVE-2018-5882
While parsing a Flac file with a corrupted comment block, a buffer over-read can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear...
Design/Logic Flaw
While parsing a Flac file with a corrupted comment block, a buffer over-read can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear...
CVE-2018-5882
CVE-2018-5882 affects Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear. The issue arises during parsing of a Flac file with a corrupted comment block, leading to a buffer over-read in the vulnerable Qualcomm-based platforms. The public descriptions explicitly name the affected product...