Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3jhf-59jq-5cpv

Опубликовано: 01 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Free Lossless Audio Codec (FLAC) libFLAC before 1.2.1 allows user-assisted remote attackers to force a client to download arbitrary files via the MIME-Type URL flag (-->) for the FLAC image file in a crafted .FLAC file.

Free Lossless Audio Codec (FLAC) libFLAC before 1.2.1 allows user-assisted remote attackers to force a client to download arbitrary files via the MIME-Type URL flag (-->) for the FLAC image file in a crafted .FLAC file.

EPSS

Процентиль: 78%
0.01143
Низкий

Дефекты

CWE-20

Связанные уязвимости

ubuntu
почти 18 лет назад

Free Lossless Audio Codec (FLAC) libFLAC before 1.2.1 allows user-assisted remote attackers to force a client to download arbitrary files via the MIME-Type URL flag (-->) for the FLAC image file in a crafted .FLAC file.

redhat
почти 18 лет назад

Free Lossless Audio Codec (FLAC) libFLAC before 1.2.1 allows user-assisted remote attackers to force a client to download arbitrary files via the MIME-Type URL flag (-->) for the FLAC image file in a crafted .FLAC file.

nvd
почти 18 лет назад

Free Lossless Audio Codec (FLAC) libFLAC before 1.2.1 allows user-assisted remote attackers to force a client to download arbitrary files via the MIME-Type URL flag (-->) for the FLAC image file in a crafted .FLAC file.

debian
почти 18 лет назад

Free Lossless Audio Codec (FLAC) libFLAC before 1.2.1 allows user-assi ...

EPSS

Процентиль: 78%
0.01143
Низкий

Дефекты

CWE-20