VULNERABILITY INTELLIGENCE

CVE-2007-6278

CVSS score9.3 HIGH
EPSS probability2.12%
CISA KEVNot currently listed
Published2007-12-07
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C

Description

Free Lossless Audio Codec (FLAC) libFLAC before 1.2.1 allows user-assisted remote attackers to force a client to download arbitrary files via the MIME-Type URL flag (-->) for the FLAC image file in a crafted .FLAC file.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references