flack123 buffer overflow
Published:		30.06.2007
Source:		BUGTRAQ
SecurityVulns ID:		7872
Type:		client
Level:		5/10
Description:		Stack-based buffer overflow on Vorbis comments parsing

Affected:		FLACKTOOLS : flac123 0.0
CVE:		CVE-2007-3507 (Stack-based buffer overflow in the local__vcentry_parse_value function in vorbiscomment.c in flac123 (aka flac-tools or flac) before 0.0.10 allows user-assisted remote attackers to execute arbitrary code via a large comment value_length.)

Original document

David Thiel, flac123 0.0.9 - Stack overflow in comment parsing (30.06.2007)

Discuss:

Read or add your comments to this news (0 comments)