NVD

Id
58273  
Name
CVE-2007-6277  
Description
Multiple buffer overflows in Free Lossless Audio Codec (FLAC) libFLAC before 1.2.1 allow user-assisted remote attackers to execute arbitrary code via large (1) Metadata Block Size, (2) VORBIS Comment String Size, (3) Picture Metadata MIME-TYPE Size, (4) Picture Description Size, (5) Picture Data Length, (6) Padding Length, and (7) PICTURE Metadata width and height values in a .FLAC file, which result in a heap-based overflow; and large (8) VORBIS Comment String Size Length, (9) Picture MIME-Type, (10) Picture MIME-Type URL, and (11) Picture Description Length values in a .FLAC file, which result in a stack-based overflow. NOTE: some of these issues may overlap CVE-2007-4619.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-12-07  
Modified Date
2010-08-21  
Seq
2007-6277  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
298745 58273 CVE-2007-6277 oval:org.mitre.oval:def:10435  View
298746 58273 CVE-2007-6277 AD20071115  View
298747 58273 CVE-2007-6277 3423  View
298748 58273 CVE-2007-6277 DSA-1469  View
298749 58273 CVE-2007-6277 VU#544656  View
298750 58273 CVE-2007-6277 20071115 EEYE: Multiple Vulnerabilities In .FLAC File Format and Various Media Applications  View
298751 58273 CVE-2007-6277 1018974  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
54270 JVNDB-2007-002962 FLAC libFLAC におけるバッファオーバーフローの脆弱性 Free Lossless Audio Codec (FLAC) libFLAC には、バッファオーバーフローの脆弱性が存在します。 CVE-2007-6277 29632 CVE-2007-6277 58273 9.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002962.html 2007-12-07 2012-06-26 View