CVE-2007-4974

Heap-based buffer overflow in the flac_buffer_copy function in libsndfile 1.0.17 and earlier might allow remote attackers to execute arbitrary code via a FLAC file with crafted PCM data containing a block with a size that exceeds the previous block size.

Read the notes from the security team

• How can I get the fixes?
• What do statuses mean?

Notes

References

• MITRE
• NVD
• Launchpad
• Debian

Related Ubuntu Security Notices (USN)

• USN-525-1
• libsndfile vulnerability
• 4 October 2007

Other references

• https://bugs.gentoo.org/show_bug.cgi?id=192834
• https://www.cve.org/CVERecord?id=CVE-2007-4974