flac - MidnightBSD Security Advisories

Advisories for flac

CVE-2014-8962 HIGH

Stack-based buffer overflow in stream_decoder.c in libFLAC before 1.3.1 allows remote attackers to execute arbitrary code via a crafted .flac file.

CVSS 2.0

Severity: HIGH

Problem Type: CWE-119,

Products Affected

Vendor	Product	Version
flac	libflac	*

CVE-2014-9028 HIGH

Heap-based buffer overflow in stream_decoder.c in libFLAC before 1.3.1 allows remote attackers to execute arbitrary code via a crafted .flac file.

CVSS 2.0

Severity: HIGH

Problem Type: CWE-119,

Products Affected

Vendor	Product	Version
flac	libflac	*