Heap overflow

Heap-based buffer overflow in streamdecoder.c in libFLAC before 1.3.1 allows remote attackers to execute arbitrary code via a crafted .flac file...

Stack overflow

Stack-based buffer overflow in streamdecoder.c in libFLAC before 1.3.1 allows remote attackers to execute arbitrary code via a crafted .flac file...

CVE-2014-8962

CVE-2014-8962 is a stack-based buffer overflow in libFLAC’s stream_decoder.c (affected pre-1.3.1) that allows remote code execution via a crafted .flac file. Related CVE-2014-9028 is a heap-based overflow in the same component. The public details reference versions up to 1.3.1 and show patches/up...

CVE-2014-8962

Stack-based buffer overflow in streamdecoder.c in libFLAC before 1.3.1 allows remote attackers to execute arbitrary code via a crafted .flac file...

CVE-2014-9028

Heap-based buffer overflow in streamdecoder.c in libFLAC before 1.3.1 allows remote attackers to execute arbitrary code via a crafted .flac file...

CVE-2014-8962

Stack-based buffer overflow in streamdecoder.c in libFLAC before 1.3.1 allows remote attackers to execute arbitrary code via a crafted .flac file...

CVE-2014-9028

CVE-2014-9028 (libFLAC) : A heap-based buffer overflow in stream_decoder.c of libFLAC prior to 1.3.1 allows remote attackers to execute arbitrary code by processing a specially crafted FLAC file. The issue is confirmed in multiple advisories: Android security bulletin’s libFLAC entry (CVE-2014-90...

CVE-2014-9028

Heap-based buffer overflow in streamdecoder.c in libFLAC before 1.3.1 allows remote attackers to execute arbitrary code via a crafted .flac file...

CVE-2014-9028

Heap-based buffer overflow in streamdecoder.c in libFLAC before 1.3.1 allows remote attackers to execute arbitrary code via a crafted .flac file...

UBUNTU-CVE-2014-8962

Stack-based buffer overflow in streamdecoder.c in libFLAC before 1.3.1 allows remote attackers to execute arbitrary code via a crafted .flac file...

PT-2014-1934

Name of the Vulnerable Software and Affected Versions flac versions prior to 1.3.1 Description The issue is related to a stack-based buffer overflow in the stream decoder.c file of the libFLAC library. This can be exploited by remote attackers through a crafted .flac file, potentially leading to...

CVE-2014-9028

Heap-based buffer overflow in streamdecoder.c in libFLAC before 1.3.1 allows remote attackers to execute arbitrary code via a crafted .flac file...

PT-2014-8798

Name of the Vulnerable Software and Affected Versions libFLAC versions prior to 1.3.1 Description The issue is related to a heap-based buffer overflow in the stream decoder.c file of libFLAC. This allows remote attackers to execute arbitrary code through a crafted .flac file. Recommendations For...

CVE-2014-8962

Stack-based buffer overflow in streamdecoder.c in libFLAC before 1.3.1 allows remote attackers to execute arbitrary code via a crafted .flac file...

CVE-2014-8962: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in streamdecoder.c in libFLAC before 1.3.1 allows remote attackers to execute arbitrary code via a crafted .flac file...

CVE-2014-9028: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in streamdecoder.c in libFLAC before 1.3.1 allows remote attackers to execute arbitrary code via a crafted .flac file...

flac: arbitrary code execution

A stack overflow and a heap overflow condition have been found in libFLAC when parsing a maliciously crafted .flac file, which may result in arbitrary code execution...

CVE-2007-6278

Free Lossless Audio Codec FLAC libFLAC before 1.2.1 allows user-assisted remote attackers to force a client to download arbitrary files via the MIME-Type URL flag -- for the FLAC image file in a crafted .FLAC file...

Heap overflow

Multiple buffer overflows in Free Lossless Audio Codec FLAC libFLAC before 1.2.1 allow user-assisted remote attackers to execute arbitrary code via large 1 Metadata Block Size, 2 VORBIS Comment String Size, 3 Picture Metadata MIME-TYPE Size, 4 Picture Description Size, 5 Picture Data Length, 6...

CVE-2007-6279

Multiple double free vulnerabilities in Free Lossless Audio Codec FLAC libFLAC before 1.2.1 allow user-assisted remote attackers to execute arbitrary code via malformed 1 Seektable values or 2 Seektable Data Offsets in a .FLAC file...