Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
9.3
CVSSv2

CVE-2007-3507

Published: 02/07/2007 Updated: 15/10/2018
CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6
VMScore: 828
Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Vulnerability Summary

Stack-based buffer overflow in the local__vcentry_parse_value function in vorbiscomment.c in flac123 (aka flac-tools or flac) prior to 0.0.10 allows user-assisted remote malicious users to execute arbitrary code via a large comment value_length.

Vulnerable Product Search on Vulmon Subscribe to Product

flac123 flac123

References

NVD-CWE-Otherhttp://www.isecpartners.com/advisories/2007-002-flactools.txthttp://sourceforge.net/forum/forum.php?forum_id=710314http://security.gentoo.org/glsa/glsa-200709-06.xmlhttp://www.securityfocus.com/bid/24712http://secunia.com/advisories/26827http://securityreason.com/securityalert/2854http://www.vupen.com/english/advisories/2007/2420http://osvdb.org/40524https://exchange.xforce.ibmcloud.com/vulnerabilities/35175http://www.securityfocus.com/archive/1/472504/100/0/threadedhttps://nvd.nist.gov
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
camerabypassCVE-2024-3592CVE-2024-37383CVE-2024-24919CVE-2024-27822CVE-2024-36788CVE-2024-36789man-in-the-middle
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook