flac: Heap buffer write overflow in read_residual_partitioned_rice_

A buffer overflow flaw was found in the way flac decoded FLAC audio files. An attacker could create a specially crafted FLAC audio file that could cause an application using the flac library to crash or execute arbitrary code when the file was read...

flac: Buffer read overflow when processing ID3V2 metadata

A buffer over-read flaw was found in the way flac processed certain ID3v2 metadata. An attacker could create a specially crafted FLAC audio file that could cause an application using the flac library to crash when the file was read...

Important: Red Hat Security Advisory: flac security update

Updated flac packages that fix two security issues are now available for Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are available...

Oracle Linux 6 / 7 : flac (ELSA-2015-0767)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-0767 advisory. - fix buffer overflow when processing ID3v2 metadata CVE-2014-8962 Tenable has extracted the preceding description block directly from the Oracle...

RHEL 6 / 7 : flac (RHSA-2015:0767)

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2015:0767 advisory. The flac packages contain a decoder and an encoder for the FLAC Free Lossless Audio Codec audio file format. A buffer overflow flaw was...

CentOS 6 / 7 : flac (CESA-2015:0767)

Updated flac packages that fix two security issues are now available for Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are available...

flac security update

CentOS Errata and Security Advisory CESA-2015:0767 Updated flac packages that fix two security issues are now available for Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores,...

flac security update

1.3.0-5 - fix buffer overflow when processing ID3v2 metadata CVE-2014-8962 - fix buffer overflow with invalid blocksize CVE-2014-9028...

Debian DLA-99-1 : flac security update

Michele Spagnuolo, of Google Security Team, and Miroslav Lichvar, of Red Hat, discovered two issues in flac, a library handling Free Lossless Audio Codec media: by providing a specially crafted FLAC file, an attacker could execute arbitrary code. CVE-2014-8962 heap-based buffer overflow in...

libFLAC 'src/flac/encode.c' Buffer Overflow Vulnerability

Libflac is a free lossless audio compression encoding and decoding program library. LibFLAC version 1.3.1 suffers from a stack buffer overflow vulnerability in the implementation of src/flac/encode.c, which can be exploited by an attacker to execute arbitrary code in an affected application...

Fedora Update for flac FEDORA-2014-16175

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for mingw-flac FEDORA-2014-16148

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GLSA-201412-40 : FLAC: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201412-40 FLAC: User-assisted execution of arbitrary code A stack-based buffer overflow flaw has been discovered in FLAC. Impact : A remote attacker could entice a user to open a specially crafted .flac file using an application...

FLAC: User-assisted execution of arbitrary code

Background The Free Lossless Audio Codec FLAC library is the reference implementation of the FLAC audio file format. Description A stack-based buffer overflow flaw has been discovered in FLAC. Impact A remote attacker could entice a user to open a specially crafted .flac file using an application...

Fedora 19 : flac-1.3.1-1.fc19 (2014-16272)

Security fix for CVE-2014-9028, CVE-2014-8962 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora Update for flac FEDORA-2014-16272

Check the version of flac SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.868621";...

[SECURITY] Fedora 19 Update: flac-1.3.1-1.fc19

FLAC stands for Free Lossless Audio Codec. Grossly oversimplified, FLAC is similar to Ogg Vorbis, but lossless. The FLAC project consists of the stream format, reference encoders and decoders in library form, flac, a command-line program to encode and decode FLAC files, metaflac, a command-line...

Mandriva Linux Security Advisory : flac (MDVSA-2014:239)

Updated flac packages fix security vulnerabilities : In libFLAC before 1.3.1, a stack overflow CVE-2014-8962 and a heap overflow CVE-2014-9028, which may result in arbitrary code execution, can be triggered by passing a maliciously crafted .flac file to the libFLAC decoder. %NASLMINLEVEL 70300 C...

Fedora 21 : mingw-flac-1.3.1-1.fc21 (2014-16148)

Security fix for CVE-2014-9028, CVE-2014-8962 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 19 : mingw-flac-1.3.1-1.fc19 (2014-16251)

Security fix for CVE-2014-9028, CVE-2014-8962 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...