Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2007-4974

Опубликовано: 19 сент. 2007
Источник: nvd
CVSS2: 7.5
EPSS Низкий

Описание

Heap-based buffer overflow in the flac_buffer_copy function in libsndfile 1.0.17 and earlier might allow remote attackers to execute arbitrary code via a FLAC file with crafted PCM data containing a block with a size that exceeds the previous block size.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mega-nerd:libsndfile:*:*:*:*:*:*:*:*
Версия до 1.0.17 (включая)
cpe:2.3:a:mega-nerd:libsndfile:0.0.8:*:*:*:*:*:*:*
cpe:2.3:a:mega-nerd:libsndfile:0.0.28:*:*:*:*:*:*:*
cpe:2.3:a:mega-nerd:libsndfile:1.0.0:*:*:*:*:*:*:*
cpe:2.3:a:mega-nerd:libsndfile:1.0.0:rc1:*:*:*:*:*:*
cpe:2.3:a:mega-nerd:libsndfile:1.0.0:rc6:*:*:*:*:*:*
cpe:2.3:a:mega-nerd:libsndfile:1.0.1:*:*:*:*:*:*:*
cpe:2.3:a:mega-nerd:libsndfile:1.0.10:*:*:*:*:*:*:*
cpe:2.3:a:mega-nerd:libsndfile:1.0.11:*:*:*:*:*:*:*
cpe:2.3:a:mega-nerd:libsndfile:1.0.12:*:*:*:*:*:*:*
cpe:2.3:a:mega-nerd:libsndfile:1.0.13:*:*:*:*:*:*:*
cpe:2.3:a:mega-nerd:libsndfile:1.0.14:*:*:*:*:*:*:*
cpe:2.3:a:mega-nerd:libsndfile:1.0.15:*:*:*:*:*:*:*
cpe:2.3:a:mega-nerd:libsndfile:1.0.16:*:*:*:*:*:*:*

EPSS

Процентиль: 91%
0.064
Низкий

7.5 High

CVSS2

Дефекты

CWE-119

Связанные уязвимости

ubuntu
почти 18 лет назад

Heap-based buffer overflow in the flac_buffer_copy function in libsndfile 1.0.17 and earlier might allow remote attackers to execute arbitrary code via a FLAC file with crafted PCM data containing a block with a size that exceeds the previous block size.

redhat
почти 18 лет назад

Heap-based buffer overflow in the flac_buffer_copy function in libsndfile 1.0.17 and earlier might allow remote attackers to execute arbitrary code via a FLAC file with crafted PCM data containing a block with a size that exceeds the previous block size.

debian
почти 18 лет назад

Heap-based buffer overflow in the flac_buffer_copy function in libsndf ...

github
больше 3 лет назад

Heap-based buffer overflow in the flac_buffer_copy function in libsndfile 1.0.17 and earlier might allow remote attackers to execute arbitrary code via a FLAC file with crafted PCM data containing a block with a size that exceeds the previous block size.

fstec
почти 18 лет назад

Уязвимость операционной системы Gentoo Linux, позволяющая удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

EPSS

Процентиль: 91%
0.064
Низкий

7.5 High

CVSS2

Дефекты

CWE-119