CVE-2006-7075

Buffer overflow in the meta_read_flac function in meta_decoder.c for Aqualung 0.9beta5 and earlier, and CVS 0.193.2 and earlier, allows user-assisted attackers to execute arbitrary code via a long Vorbis comment in a Free Lossless Audio Codec (FLAC) file.

CVSS v2.0

6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

1.98% chance of exploitation in the next 30 days, 79th percentile

Published

2007-02-27

Updated

2024-08-07

Proof-of-concept exploits (1)

• http://aluigi.altervista.org/adv/aquabof-adv.txt

References

• CVE Record
• NVD entry

Related

• CVE-2006-7072
• CVE-2006-7079
• CVE-2006-7071
• CVE-2006-7080
• CVE-2006-7070
• CVE-2006-7081