Red Hat Security AdvisoryRHSA-2007:0975
flac security update
Released 2007-10-22 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) flac-1.1.2-28.el5_0.1, flac-1.1.2-28.el5_0.1.i386, flac-1.1.2-28.el5_0.1.ia64 +5
- Red Hat Enterprise Linux AS version 4 flac-1.1.0-7.el4_5.2, flac-1.1.0-7.el4_5.2.i386, flac-1.1.0-7.el4_5.2.ia64 +9
- Red Hat Enterprise Linux Desktop (v. 5 client) flac-1.1.2-28.el5_0.1, flac-1.1.2-28.el5_0.1.i386
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) flac-1.1.2-28.el5_0.1, flac-devel-1.1.2-28.el5_0.1, flac-devel-1.1.2-28.el5_0.1.i386
- Red Hat Enterprise Linux Desktop version 4 flac-1.1.0-7.el4_5.2, flac-1.1.0-7.el4_5.2.i386, flac-devel-1.1.0-7.el4_5.2 +3
- Red Hat Enterprise Linux ES version 4 flac-1.1.0-7.el4_5.2, flac-1.1.0-7.el4_5.2.i386, flac-1.1.0-7.el4_5.2.ia64 +6
- Red Hat Enterprise Linux WS version 4 flac-1.1.0-7.el4_5.2, flac-1.1.0-7.el4_5.2.i386, flac-1.1.0-7.el4_5.2.ia64 +6
Fixes 2 records
Priority MEDIUM 50
Multiple buffer overflows in Free Lossless Audio Codec (FLAC) libFLAC before 1.2.1 allow user-assisted remote attackers to execute arbitrary code via large (1) Metadata Block Size, (2) VORBIS Comment String Size, (3) Pic…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.06742 · Published 2007-12-07 · Fixed CWE-119
Priority MEDIUM 50
Multiple integer overflows in Free Lossless Audio Codec (FLAC) libFLAC before 1.2.1, as used in Winamp before 5.5 and other products, allow user-assisted remote attackers to execute arbitrary code via a malformed FLAC fi…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.06748 · Published 2007-10-12 · Fixed CWE-189
