Launchpad.net

CVE 2014-9028

Heap-based buffer overflow in stream_decoder.c in libFLAC before 1.3.1 allows remote attackers to execute arbitrary code via a crafted .flac file.

CVE-2014-9028 (Candidate) is related to these bugs:

Bug #1398666: Sync flac 1.3.0-3 (main) from Debian unstable (main)

Summary				In	Importance	Status
	1398666	Sync flac 1.3.0-3 (main) from Debian unstable (main)		flac (Ubuntu)	Wishlist	Fix Released

Bug #1406634: Sync flac 1.3.1-1 (main) from Debian experimental (main)

Summary				In	Importance	Status
	1406634	Sync flac 1.3.1-1 (main) from Debian experimental (main)		flac (Ubuntu)	Wishlist	Fix Released

See the

CVE page on Mitre.org for more details.