Vulnerability Database

289,784

Total vulnerabilities in the database

CVE-2007-6278

Free Lossless Audio Codec (FLAC) libFLAC before 1.2.1 allows user-assisted remote attackers to force a client to download arbitrary files via the MIME-Type URL flag (-->) for the FLAC image file in a crafted .FLAC file.

  • Published: Dec 7, 2007
  • Updated: Apr 13, 2023
  • CVE: CVE-2007-6278
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 9.3
  • AV:N/AC:M/Au:N/C:C/I:C/A:C

CWEs:

Software From Fixed in
flac / libflac - 1.2.x