Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 514
Alerts This Week
Warning Icon 1 514

Gentoo: 200711-15 Advisory: Risks of FLAC Buffer Overflow Vulnerability

gentoo
Calendar Grey November 12, 2007
Scroller Gentoo
Various integer overflow vulnerabilities in FLAC could lead to unauthorized code execution. It is advised that Gentoo Linux users perform an update.
Multiple integer overflow vulnerabilities were found in FLAC possibly allowing for the execution of arbitrary code.

Summary

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Gentoo Linux Security Advisory                           GLSA 200711-15
                                            https://security.gentoo.org/

  Severity: Normal
     Title: FLAC: Buffer overflow
      Date: November 12, 2007
      Bugs: #195700
        ID: 200711-15


Synopsis
=======
Multiple integer overflow vulnerabilities were found in FLAC possibly
allowing for the execution of arbitrary code.

Background
=========
The Xiph.org Free Lossless Audio Codec (FLAC) library is the reference
implementation of the FLAC audio file format. It contains encoders and
decoders in library and executable form.

Affected packages
================
    -------------------------------------------------------------------
     Package          /  Vulnerable  /                      Unaffected
    -------------------------------------------------------------------
  1  media-libs/flac     < 1.2.1-r1                        >= 1.2.1-r1

==========
Sean de Regg...
Read the Full Advisory
Topics%20covered

Topics Covered

security advisory gentoo buffer overflow arbitrary code execution media library

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Topics%20covered

Topics Covered

security advisory gentoo buffer overflow arbitrary code execution media library

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround