[SECURITY] Fedora 7 Update: flac123-0.0.11-1.fc7

flac123 is a command-line program for playing FLAC audio files FLAC stands for Free Lossless Audio Codec. Grossly oversimplified, FLAC is similar to Ogg Vorbis, but lossless...

Stack overflow

Stack-based buffer overflow in the localvcentryparsevalue function in vorbiscomment.c in flac123 aka flac-tools or flac before 0.0.10 allows user-assisted remote attackers to execute arbitrary code via a large comment valuelength...

CVE-2006-7075

Buffer overflow in the metareadflac function in metadecoder.c for Aqualung 0.9beta5 and earlier, and CVS 0.193.2 and earlier, allows user-assisted attackers to execute arbitrary code via a long Vorbis comment in a Free Lossless Audio Codec FLAC file...