Multiple FLAC Vulnerabilities Affect Every OS

Enon writes "eEye Digital Security has discovered 14 vulnerabilities in the FLAC file format that affect a huge range of media players on every supported operating system (Windows, Mac OS, Linux, Unix, BSD, Solaris, and even some hardware players are vulnerable). Heise points out a number of vulnerable apps that use the open source libavcodec audio codec library, which in turn relies on the flawed libFLAC library. These vulnerabilities could allow a person of ill will to trojanize FLAC files that could compromise your computer if they are played on a vulnerable media player. eEye worked with US-CERT to notify vulnerable vendors."

Comments

Re:But I thought that this didn't happen with FOSS

[Phlegethon_River]

He works for them, check his webpage.

Re:A lot of these are app flaws, not flac flaws ..

[ThirdPrize]

2. I hardly think libFLAC counts as an "essential Linux library". You are new here aren't you, boy.