VYPR

libFLAC

by Free Lossless Audio Codec

CVEs (2)

  • CVE-2007-6279Dec 7, 2007
    risk 0.00cvss epss 0.04

    Multiple double free vulnerabilities in Free Lossless Audio Codec (FLAC) libFLAC before 1.2.1 allow user-assisted remote attackers to execute arbitrary code via malformed (1) Seektable values or (2) Seektable Data Offsets in a .FLAC file.

  • CVE-2007-6278Dec 7, 2007
    risk 0.00cvss epss 0.02

    Free Lossless Audio Codec (FLAC) libFLAC before 1.2.1 allows user-assisted remote attackers to force a client to download arbitrary files via the MIME-Type URL flag (-->) for the FLAC image file in a crafted .FLAC file.