Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

flac123: arbitrary code execution

Package(s):

flac123

CVE #(s):

CVE-2007-3507

Created:

July 13, 2007

Updated:

October 22, 2007

Description:

A stack-based buffer overflow in the local__vcentry_parse_value function in vorbiscomment.c in flac123 (aka flac-tools or flac) before 0.0.10 allows user-assisted remote attackers to execute arbitrary code via a large comment value_length.

Alerts:

Gentoo	200709-06	2007-09-14
Fedora	FEDORA-2007-1045	2007-07-12

(Log in to post comments)