Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Stack-based buffer overflow in the local__vcentry_parse_value function in vorbiscomment.c in flac123 (aka flac-tools or flac) before 0.0.10 allows user-assisted remote attackers to execute arbitrary code via a large comment value_length.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Flac123 local__vcentry_parse_values()远程栈溢出漏洞
Vulnerability Description
flac123是用于播放FLAC音频文件的命令行工具。 flac123在处理畸形格式的音频文件时存在漏洞，攻击者可能通过诱使用户打开处理恶意文件来控制用户机器。 flac123的vorbiscomment.c文件中的local__vcentry_parse_value()函数没有正确地处理超长的value_length值，如果用户受骗打开恶意的音频文件的话，就可能在memcpy()期间溢出dest缓冲区，导致执行任意指令。
CVSS Information
N/A
Vulnerability Type
N/A