CVE-2014-9028

Опубликовано: 26 нояб. 2014

Источник: nvd

CVSS2: 7.5

EPSS Средний

Описание

Heap-based buffer overflow in stream_decoder.c in libFLAC before 1.3.1 allows remote attackers to execute arbitrary code via a crafted .flac file.

Конфигурация 1

cpe:2.3:a:flac:libflac:*:*:*:*:*:*:*:*

Версия до 1.3.0 (включая)

EPSS

Процентиль: 96%

0.25739

Средний

7.5 High

CVSS2

CWE-119

CVE-2014-9028

ubuntu

почти 11 лет назад

Heap-based buffer overflow in stream_decoder.c in libFLAC before 1.3.1 allows remote attackers to execute arbitrary code via a crafted .flac file.

CVE-2014-9028

redhat

почти 11 лет назад

Heap-based buffer overflow in stream_decoder.c in libFLAC before 1.3.1 allows remote attackers to execute arbitrary code via a crafted .flac file.

CVE-2014-9028

debian

почти 11 лет назад

Heap-based buffer overflow in stream_decoder.c in libFLAC before 1.3.1 ...

GHSA-6x2f-7ggw-rc86

github

больше 3 лет назад

Heap-based buffer overflow in stream_decoder.c in libFLAC before 1.3.1 allows remote attackers to execute arbitrary code via a crafted .flac file.

ELSA-2015-0767

oracle-oval

больше 10 лет назад

ELSA-2015-0767: flac security update (IMPORTANT)

EPSS

Процентиль: 96%

0.25739

Средний

7.5 High

CVSS2

CWE-119