CVE-2017-6888
25.04.2018, 21:29
An error in the "read_metadata_vorbiscomment_()" function (src/libFLAC/stream_decoder.c) in FLAC version 1.3.2 can be exploited to cause a memory leak via a specially crafted FLAC file.Enginsight
| Vendor | Product | Version |
|---|---|---|
| flac_project | flac | 𝑥 ≤ 1.3.2 |
| debian | debian_linux | 9.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| android |
| ||||||||||||||||||||||||||||||||
| chromium-browser |
| ||||||||||||||||||||||||||||||||
| flac |
| ||||||||||||||||||||||||||||||||
| mame |
| ||||||||||||||||||||||||||||||||
| oxide-qt |
| ||||||||||||||||||||||||||||||||
| praat |
|
Common Weakness Enumeration
References