CVE-2007-4619: flac libflac Numeric Errors

EPSS trend

Probability

6.75%

Chance of exploitation in the next 30 days

Percentile

94%

Versus all other CVEs

30-day change

0.00 pp

From 6.75% on 20-09-2026

20-09-202620-10-2026

EPSS score

6.75%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

32 links

www.securityfocus.com/bid/26042VDB EntryX Refsource BIDPatch
security.gentoo.org/glsa/glsa-200711-15.xmlVendor AdvisoryX Refsource GENTOO
secunia.com/advisories/27507Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/27223Third Party AdvisoryX Refsource SECUNIA
www.debian.org/security/2008/dsa-1469Vendor AdvisoryX Refsource DEBIAN
www.ubuntu.com/usn/usn-540-1Vendor AdvisoryX Refsource UBUNTU
labs.idefense.com/intelligence/vulnerabilities/display.php?id=608Third Party AdvisoryX Refsource IDEFENSE
secunia.com/advisories/27210Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/27601Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2007/4061VDB EntryX Refsource VUPEN

Show all 32 references

bugzilla.redhat.com/show_bug.cgi?id=331991X Refsource CONFIRM
secunia.com/advisories/27780Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/28548Third Party AdvisoryX Refsource SECUNIA
www.redhat.com/archives/fedora-package-announce/2007-November/msg00035.htmlVendor AdvisoryX Refsource FEDORA
secunia.com/advisories/27878Third Party AdvisoryX Refsource SECUNIA
wiki.rpath.com/wiki/Advisories:rPSA-2007-0243X Refsource CONFIRM
secunia.com/advisories/27355Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/27628Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/27399Third Party AdvisoryX Refsource SECUNIA
exchange.xforce.ibmcloud.com/vulnerabilities/37187VDB EntryX Refsource XF
www.mandriva.com/security/advisories?name=MDKSA-2007:214Vendor AdvisoryX Refsource MANDRIVA
securitytracker.com/id?1018815VDB EntryX Refsource SECTRACK
issues.rpath.com/browse/RPL-1873X Refsource CONFIRM
bugzilla.redhat.com/show_bug.cgi?id=332571X Refsource CONFIRM
www.vupen.com/english/advisories/2007/3483VDB EntryX Refsource VUPEN
www.redhat.com/support/errata/RHSA-2007-0975.htmlVendor AdvisoryX Refsource REDHAT
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10571VDB EntrySignatureX Refsource OVAL
secunia.com/advisories/27625Third Party AdvisoryX Refsource SECUNIA
lists.opensuse.org/opensuse-security-announce/2007-10/msg00008.htmlVendor AdvisoryX Refsource SUSE
flac.sourceforge.net/changelog.htmlX Refsource CONFIRMPatch
www.vupen.com/english/advisories/2007/3484VDB EntryX Refsource VUPEN
security-tracker.debian.org/tracker/CVE-2007-4619Advisory

Related vulnerabilities

CVE-2013-4694nullsoftwinamp17.21%12y ago16-04-2014 22:00Stack-based buffer overflow in gen_jumpex.dll in Winamp before 5.64 Build 3418 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a package with a long Skin directory name. NOTE: a second buffer overflow involving a long GUI Search field to ml_local.dll was also reported. However, since it is only exploitable by the user of the application, this issue would not cross privilege boundaries unless Winamp is running under a highly restricted environment such as a kiosk.CVE-2007-6278debianflac+12.12%18y ago07-12-2007 11:00Free Lossless Audio Codec (FLAC) libFLAC before 1.2.1 allows user-assisted remote attackers to force a client to download arbitrary files via the MIME-Type URL flag (-->) for the FLAC image file in a crafted .FLAC file.CVE-2007-6279debianflac+13.98%18y ago07-12-2007 11:00Multiple double free vulnerabilities in Free Lossless Audio Codec (FLAC) libFLAC before 1.2.1 allow user-assisted remote attackers to execute arbitrary code via malformed (1) Seektable values or (2) Seektable Data Offsets in a .FLAC file.CVE-2007-6277debianflac+16.74%18y ago07-12-2007 11:00Multiple buffer overflows in Free Lossless Audio Codec (FLAC) libFLAC before 1.2.1 allow user-assisted remote attackers to execute arbitrary code via large (1) Metadata Block Size, (2) VORBIS Comment String Size, (3) Picture Metadata MIME-TYPE Size, (4) Picture Description Size, (5) Picture Data Length, (6) Padding Length, and (7) PICTURE Metadata width and height values in a .FLAC file, which result in a heap-based overflow; and large (8) VORBIS Comment String Size Length, (9) Picture MIME-Type, (10) Picture MIME-Type URL, and (11) Picture Description Length values in a .FLAC file, which result in a stack-based overflow. NOTE: some of these issues may overlap CVE-2007-4619.CVE-2014-9028debianflac+29.86%11y ago26-11-2014 15:00Heap-based buffer overflow in stream_decoder.c in libFLAC before 1.3.1 allows remote attackers to execute arbitrary code via a crafted .flac file.CVE-2014-8962debianflac+29.86%11y ago26-11-2014 15:00Stack-based buffer overflow in stream_decoder.c in libFLAC before 1.3.1 allows remote attackers to execute arbitrary code via a crafted .flac file.

All vulnerabilities inlibflac winamp

CVE-2007-4619: flac libflac Numeric Errors

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References