CVE-2007-6278
EPSS 2.5%
Description
Free Lossless Audio Codec (FLAC) libFLAC before 1.2.1 allows user-assisted remote attackers to force a client to download arbitrary files via the MIME-Type URL flag (-->) for the FLAC image file in a crafted .FLAC file.
How to fix CVE-2007-6278
To remediate CVE-2007-6278, upgrade the affected package to a fixed version below.
- Debian/flac—upgrade to 1.2.1-1 or later
Is CVE-2007-6278 being exploited?
Low — EPSS is 2.5%, meaning exploitation activity has not been observed at scale.
Affected packages (1)
- from 0, < 1.2.1-1