CVE-2006-7075 | BDVDB-2026-22522 Detail

Description#

Buffer overflow in the meta_read_flac function in meta_decoder.c for Aqualung 0.9beta5 and earlier, and CVS 0.193.2 and earlier, allows user-assisted attackers to execute arbitrary code via a long Vorbis comment in a Free Lossless Audio Codec (FLAC) file.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://aluigi.altervista.org/adv/aquabof-adv.txt
https://exchange.xforce.ibmcloud.com/vulnerabilities/28310

Exploit#

No public exploit known

History#

Version 12007-02-27Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.