CVE-2007-6278
Free Lossless Audio Codec (FLAC) libFLAC before 1.2.1 allows user-assisted remote attackers to force a client to download arbitrary files via the MIME-Type URL flag (-->) for the FLAC image file in a
02 Description
Free Lossless Audio Codec (FLAC) libFLAC before 1.2.1 allows user-assisted remote attackers to force a client to download arbitrary files via the MIME-Type URL flag (-->) for the FLAC image file in a
03 Exploitation and scoring
- Exploitation
- Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
- SSVC decision
- Not assessed by CISA
- EPSS probability
- 2.12% probability of exploitation activity in the next 30 days.
- EPSS percentile
- Equal to or higher than the score of 81.8% of scored records. A rank, not a probability.
- NVD base score
- The NVD has published no score for this record
- NVD CVSS vector
- No NVD score to derive
- NVD analysis status
- Modified. NVD last modified this record on 2026-06-16.
- Red Hat severity
- No Red Hat rating. Red Hat rates the CVEs that affect its products.
Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.
04 Metadata
- Published
- 2007-12-07 11:00Z18 YR AGO
- Last updated
- 2024-08-07 16:02Z2 YR AGO
- Reserved
- 2007-12-07
- Assigning CNA
- mitre
- Record state
- PUBLISHED
- Severity
- Not rated by the issuing CNA
- CNA CVSS vector
- Not published by the issuing CNA
- Weaknesses
- Data version
- 5.1
- Document digest
- ea5fc1a04a2fdfbf0bf04621b89ec6a582cc8af2446a9d64377e9ba1c322f37b
05 Affected products
06 References
- research.eeye.comAD20071115http://research.eeye.com/html/advisories/published/AD20071115.html
- www.securitytracker.com1018974http://www.securitytracker.com/id?1018974
- securityreason.com3423http://securityreason.com/securityalert/3423
- www.kb.cert.orgVU#544656http://www.kb.cert.org/vuls/id/544656
- www.securityfocus.com20071115 EEYE: Multiple Vulnerabilities In .FLAC File Format and Various Media Applicationshttp://www.securityfocus.com/archive/1/483765/100/200/threaded
07 Fixed in
Debian 12
- flac Fixed in 1.2.1-1
Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.
Debian 13
- flac Fixed in 1.2.1-1
Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.
Debian 14
- flac Fixed in 1.2.1-1
Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.
A release or ecosystem missing from this list has no record here. It may be unaffected or not covered by the source. Source notices and licences.