NVD

Id
58274  
Name
CVE-2007-6278  
Description
Free Lossless Audio Codec (FLAC) libFLAC before 1.2.1 allows user-assisted remote attackers to force a client to download arbitrary files via the MIME-Type URL flag (-->) for the FLAC image file in a crafted .FLAC file.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-12-07  
Modified Date
2008-09-05  
Seq
2007-6278  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
298752 58274 CVE-2007-6278 AD20071115  View
298753 58274 CVE-2007-6278 3423  View
298754 58274 CVE-2007-6278 VU#544656  View
298755 58274 CVE-2007-6278 20071115 EEYE: Multiple Vulnerabilities In .FLAC File Format and Various Media Applications  View
298756 58274 CVE-2007-6278 1018974  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
54271 JVNDB-2007-002963 FLAC libFLAC におけるクライアントに任意のファイルを強制ダウンロードされる脆弱性 Free Lossless Audio Codec (FLAC) libFLAC には、クライアントに任意のファイルを強制ダウンロードされる脆弱性が存在します。 CVE-2007-6278 29633 CVE-2007-6278 58274 9.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002963.html 2007-12-07 2012-06-26 View