PT-2014-1934 · Xiph.Org+4 · Flac+4
Publicado
2014-11-26
·
Atualizado
2024-06-15
·
CVE-2014-8962
CVSS v2.0
7.5
Alta
| Vetor | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
flac versions prior to 1.3.1
Description
The issue is related to a stack-based buffer overflow in the stream decoder.c file of the libFLAC library. This can be exploited by remote attackers through a crafted .flac file, potentially leading to the execution of arbitrary code and compromising the confidentiality, integrity, and availability of protected information.
Recommendations
For versions prior to 1.3.1, update to version 1.3.1 or later to resolve the issue. As a temporary workaround, consider restricting access to .flac files from untrusted sources to minimize the risk of exploitation.
Correção
RCE
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Centos
Red Hat
Suse
Ubuntu
Flac