oval:org.mitre.oval:def:10435
| Definition Id: oval:org.mitre.oval:def:10435 | |||
| Oval ID: | oval:org.mitre.oval:def:10435 | ||
| Title: | Multiple buffer overflows in Free Lossless Audio Codec (FLAC) libFLAC before 1.2.1 allow user-assisted remote attackers to execute arbitrary code via large (1) Metadata Block Size, (2) VORBIS Comment String Size, (3) Picture Metadata MIME-TYPE Size, (4) Picture Description Size, (5) Picture Data Length, (6) Padding Length, and (7) PICTURE Metadata width and height values in a .FLAC file, which result in a heap-based overflow; and large (8) VORBIS Comment String Size Length, (9) Picture MIME-Type, (10) Picture MIME-Type URL, and (11) Picture Description Length values in a .FLAC file, which result in a stack-based overflow. NOTE: some of these issues may overlap CVE-2007-4619. | ||
| Description: | Multiple buffer overflows in Free Lossless Audio Codec (FLAC) libFLAC before 1.2.1 allow user-assisted remote attackers to execute arbitrary code via large (1) Metadata Block Size, (2) VORBIS Comment String Size, (3) Picture Metadata MIME-TYPE Size, (4) Picture Description Size, (5) Picture Data Length, (6) Padding Length, and (7) PICTURE Metadata width and height values in a .FLAC file, which result in a heap-based overflow; and large (8) VORBIS Comment String Size Length, (9) Picture MIME-Type, (10) Picture MIME-Type URL, and (11) Picture Description Length values in a .FLAC file, which result in a stack-based overflow. NOTE: some of these issues may overlap CVE-2007-4619. | ||
| Family: | unix | Class: | vulnerability |
| Reference(s): | CVE-2007-6277 | Version: | 5 |
| Platform(s): | Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5 | Product(s): | |
| Definition Synopsis: | |||
| |||
| Definition Id: oval:org.mitre.oval:def:16636 | |||
| Oval ID: | oval:org.mitre.oval:def:16636 | ||
| Title: | CentOS Linux 4.x | ||
| Description: | The operating system installed on the system is CentOS Linux 4.x | ||
| Family: | unix | Class: | inventory |
| Reference(s): | cpe:/o:centos:centos:4 | Version: | 3 |
| Platform(s): | CentOS Linux 4 | Product(s): | |
| Definition Synopsis: | |||
| Referenced By: | |||
| oval:org.mitre.oval:def:10435 | |||
| Definition Id: oval:org.mitre.oval:def:15990 | |||
| Oval ID: | oval:org.mitre.oval:def:15990 | ||
| Title: | Oracle Linux 4.x | ||
| Description: | The operating system installed on the system is Oracle Linux 4.x | ||
| Family: | unix | Class: | inventory |
| Reference(s): | cpe:/o:oracle:linux:4 | Version: | 5 |
| Platform(s): | Oracle Linux 4 | Product(s): | |
| Definition Synopsis: | |||
| Referenced By: | |||
| oval:org.mitre.oval:def:10435 | |||
| Definition Id: oval:org.mitre.oval:def:11414 | |||
| Oval ID: | oval:org.mitre.oval:def:11414 | ||
| Title: | The operating system installed on the system is Red Hat Enterprise Linux 5 | ||
| Description: | The operating system installed on the system is Red Hat Enterprise Linux 5. | ||
| Family: | unix | Class: | inventory |
| Reference(s): | cpe:/o:redhat:enterprise_linux:5 | Version: | 7 |
| Platform(s): | Red Hat Enterprise Linux 5 | Product(s): | |
| Definition Synopsis: | |||
| Referenced By: | |||
| oval:org.mitre.oval:def:10435 | |||
| Definition Id: oval:org.mitre.oval:def:15802 | |||
| Oval ID: | oval:org.mitre.oval:def:15802 | ||
| Title: | The operating system installed on the system is CentOS Linux 5.x | ||
| Description: | The operating system installed on the system is CentOS Linux 5.x | ||
| Family: | unix | Class: | inventory |
| Reference(s): | cpe:/o:centos:centos:5 | Version: | 7 |
| Platform(s): | CentOS Linux 5 | Product(s): | |
| Definition Synopsis: | |||
| Referenced By: | |||
| oval:org.mitre.oval:def:10435 | |||
| Definition Id: oval:org.mitre.oval:def:15459 | |||
| Oval ID: | oval:org.mitre.oval:def:15459 | ||
| Title: | Oracle Linux 5.x | ||
| Description: | The operating system installed on the system is Oracle Linux 5.x | ||
| Family: | unix | Class: | inventory |
| Reference(s): | cpe:/o:oracle:linux:5 | Version: | 7 |
| Platform(s): | Oracle Linux 5 | Product(s): | |
| Definition Synopsis: | |||
| Referenced By: | |||
| oval:org.mitre.oval:def:10435 | |||
| Definition Id: oval:org.mitre.oval:def:11831 | |||
| Oval ID: | oval:org.mitre.oval:def:11831 | ||
| Title: | The operating system installed on the system is Red Hat Enterprise Linux 4 | ||
| Description: | The operating system installed on the system is Red Hat Enterprise Linux 4. | ||
| Family: | unix | Class: | inventory |
| Reference(s): | cpe:/o:redhat:enterprise_linux:4 | Version: | 7 |
| Platform(s): | Red Hat Enterprise Linux 4 | Product(s): | |
| Definition Synopsis: | |||
| Referenced By: | |||
| oval:org.mitre.oval:def:10435 | |||
