VULNERABILITY INTELLIGENCE
CVE-2007-3507
CVSS score9.3 HIGH
EPSS probability5.54%
CISA KEVNot currently listed
Published2007-07-02
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C
Description
Stack-based buffer overflow in the local__vcentry_parse_value function in vorbiscomment.c in flac123 (aka flac-tools or flac) before 0.0.10 allows user-assisted remote attackers to execute arbitrary code via a large comment value_length.