Unrated severityNVD Advisory· Published Mar 2, 2007· Updated Jun 16, 2026

CVE-2006-7075

Description

Buffer overflow in the meta_read_flac function in meta_decoder.c for Aqualung 0.9beta5 and earlier, and CVS 0.193.2 and earlier, allows user-assisted attackers to execute arbitrary code via a long Vorbis comment in a Free Lossless Audio Codec (FLAC) file.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Aqualung/Aqualung2 versions
cpe:2.3:a:aqualung:aqualung:0.9_beta5:beta5:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:aqualung:aqualung:0.9_beta5:beta5:*:*:*:*:*:*
- (no CPE)range: <=0.9beta5 (CVS <=0.193.2)

Patches

Vulnerability mechanics

References

aluigi.altervista.org/adv/aquabof-adv.txtnvdExploitPatchVendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/28310nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000