CVE-2007-3507

Publicada em 02 jul 2007 · Atualizada em 07 ago 2024

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 5.5%

Stack-based buffer overflow in the local__vcentry_parse_value function in vorbiscomment.c in flac123 (aka flac-tools or flac) before 0.0.10 allows user-assisted remote attackers to execute arbitrary code via a large comment value_length.

Produtos afetados

n/a · n/a

Referências

http://osvdb.org/40524 http://secunia.com/advisories/26827 http://security.gentoo.org/glsa/glsa-200709-06.xml http://securityreason.com/securityalert/2854 https://exchange.xforce.ibmcloud.com/vulnerabilities/35175 http://sourceforge.net/forum/forum.php?forum_id=710314 http://www.isecpartners.com/advisories/2007-002-flactools.txt http://www.securityfocus.com/archive/1/472504/100/0/threaded http://www.securityfocus.com/bid/24712 http://www.vupen.com/english/advisories/2007/2420