flac vulnerability

2007-11-1300:00:00

ubuntu.com

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.1

Confidence

Low

EPSS

0.467

Percentile

97.5%

JSON

Releases

Ubuntu 7.10
Ubuntu 7.04
Ubuntu 6.10
Ubuntu 6.06

Packages

flac -

Details

Sean de Regge discovered that flac did not properly perform bounds
checking in many situations. An attacker could send a specially crafted
FLAC audio file and execute arbitrary code as the user or cause a denial
of service in flac or applications that link against flac.

OSVersionArchitecturePackageVersionFilename
Ubuntu7.10noarchlibflac8< 1.1.4-3ubuntu1.1UNKNOWN
Ubuntu7.10noarchflac< 1.1.4-3ubuntu1.1UNKNOWN
Ubuntu7.10noarchlibflac++-dev< 1.1.4-3ubuntu1.1UNKNOWN
Ubuntu7.10noarchlibflac++6< 1.1.4-3ubuntu1.1UNKNOWN
Ubuntu7.10noarchlibflac-dev< 1.1.4-3ubuntu1.1UNKNOWN
Ubuntu7.04noarchlibflac7< 1.1.2-5ubuntu2.1UNKNOWN
Ubuntu7.04noarchflac< 1.1.2-5ubuntu2.1UNKNOWN
Ubuntu7.04noarchlibflac++-dev< 1.1.2-5ubuntu2.1UNKNOWN
Ubuntu7.04noarchlibflac++5c2< 1.1.2-5ubuntu2.1UNKNOWN
Ubuntu7.04noarchlibflac-dev< 1.1.2-5ubuntu2.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	7.10	noarch	libflac8	< 1.1.4-3ubuntu1.1	UNKNOWN
Ubuntu	7.10	noarch	flac	< 1.1.4-3ubuntu1.1	UNKNOWN
Ubuntu	7.10	noarch	libflac++-dev	< 1.1.4-3ubuntu1.1	UNKNOWN
Ubuntu	7.10	noarch	libflac++6	< 1.1.4-3ubuntu1.1	UNKNOWN
Ubuntu	7.10	noarch	libflac-dev	< 1.1.4-3ubuntu1.1	UNKNOWN
Ubuntu	7.04	noarch	libflac7	< 1.1.2-5ubuntu2.1	UNKNOWN
Ubuntu	7.04	noarch	flac	< 1.1.2-5ubuntu2.1	UNKNOWN
Ubuntu	7.04	noarch	libflac++-dev	< 1.1.2-5ubuntu2.1	UNKNOWN
Ubuntu	7.04	noarch	libflac++5c2	< 1.1.2-5ubuntu2.1	UNKNOWN
Ubuntu	7.04	noarch	libflac-dev	< 1.1.2-5ubuntu2.1	UNKNOWN