NVD

Id
35849  
Name
CVE-2014-9028  
Description
Heap-based buffer overflow in stream_decoder.c in libFLAC before 1.3.1 allows remote attackers to execute arbitrary code via a crafted .flac file.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-11-26  
Modified Date
2016-10-25  
Seq
2014-9028  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
183531 35849 CVE-2014-9028 http://advisories.mageia.org/MGASA-2014-0499.html  View
183532 35849 CVE-2014-9028 openSUSE-SU-2014:1588  View
183533 35849 CVE-2014-9028 http://packetstormsecurity.com/files/129261/libFLAC-1.3.0-Stack-Overflow-Heap-Overflow-Code-Execution.html  View
183534 35849 CVE-2014-9028 RHSA-2015:0767  View
183535 35849 CVE-2014-9028 DSA-3082  View
183536 35849 CVE-2014-9028 MDVSA-2014:239  View
183537 35849 CVE-2014-9028 MDVSA-2015:188  View
183538 35849 CVE-2014-9028 http://www.ocert.org/advisories/ocert-2014-008.html  View
183539 35849 CVE-2014-9028 http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html  View
183540 35849 CVE-2014-9028 20141125 [oCERT 2014-008] libFLAC multiple issues  View
183541 35849 CVE-2014-9028 71282  View
183542 35849 CVE-2014-9028 USN-2426-1  View
183543 35849 CVE-2014-9028 https://git.xiph.org/?p=flac.git;a=commit;h=fcf0ba06ae12ccd7c67cee3c8d948df15f946b85  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
16791 JVNDB-2014-005666 libFLAC の stream_decoder.c におけるヒープベースのバッファオーバーフローの脆弱性 libFLAC の stream_decoder.c には、ヒープベースのバッファオーバーフローの脆弱性が存在します。 CVE-2014-9028 76321 CVE-2014-9028 35849 7.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005666.html 2014-11-25 2015-05-25 View