Multiple FLAC Vulnerabilities Affect Every OS

Enon writes "eEye Digital Security has discovered 14 vulnerabilities in the FLAC file format that affect a huge range of media players on every supported operating system (Windows, Mac OS, Linux, Unix, BSD, Solaris, and even some hardware players are vulnerable). Heise points out a number of vulnerable apps that use the open source libavcodec audio codec library, which in turn relies on the flawed libFLAC library. These vulnerabilities could allow a person of ill will to trojanize FLAC files that could compromise your computer if they are played on a vulnerable media player. eEye worked with US-CERT to notify vulnerable vendors."

Comments

security bugs that FOSS does not have

[r00t]

undesired/unauthorized phone home

undesired/unauthorized upgrades, like the one you bastards forced on me DESPITE my having set XP updates to download **only** for later manual install

Digital Restriction Management -- need I say more? From the user's viewpoint, it's a bug.

sudden failure of the OS because some defective algorithm thinks Windows isn't "genuine"

Re:I like ponies.

[Anonymous Coward]

Mmm ponies, delicious.