CVE-2007-6279

Publication date 7 December 2007

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

Multiple double free vulnerabilities in Free Lossless Audio Codec (FLAC) libFLAC before 1.2.1 allow user-assisted remote attackers to execute arbitrary code via malformed (1) Seektable values or (2) Seektable Data Offsets in a .FLAC file.

Read the notes from the security team

Status

Package Ubuntu Release Status
flac 7.10 gutsy
Fixed 1.1.4-3ubuntu1.1
7.04 feisty
Fixed 1.1.2-5ubuntu2.1
6.10 edgy
Fixed 1.1.2-5ubuntu1.1
6.06 LTS dapper
Fixed 1.1.2-3ubuntu1.1

Notes

jdstrand

iDefense information had virtually no details, however the Ubuntu fix for CVE-2007-4619 has several seektable checks before free, so I am marking this as fixed. note that CVE-2007-4619 was very general and came out before the iDefense CVEs, so there is overlap