CVE-2007-3507
Publication date 2 July 2007
Last updated 17 July 2025
Ubuntu priority
Stack-based buffer overflow in the local__vcentry_parse_value function in vorbiscomment.c in flac123 (aka flac-tools or flac) before 0.0.10 allows user-assisted remote attackers to execute arbitrary code via a large comment value_length.