CVE-2007-4974

Heap-based buffer overflow in the flac_buffer_copy function in libsndfile 1.0.17 and earlier might allow remote attackers to execute arbitrary code via a FLAC file with crafted PCM data containing a block with a size that exceeds the previous block size.

• CWE-119

• http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00002.html
• http://secunia.com/advisories/26921Vendor Advisory
• http://secunia.com/advisories/26932Vendor Advisory
• http://secunia.com/advisories/27018Vendor Advisory
• http://secunia.com/advisories/27071Vendor Advisory
• http://secunia.com/advisories/27100Vendor Advisory
• http://secunia.com/advisories/28265Vendor Advisory
• http://secunia.com/advisories/28412Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200710-04.xml
• http://www.debian.org/security/2007/dsa-1442
• http://www.mandriva.com/security/advisories?name=MDKSA-2007:191
• http://www.securityfocus.com/bid/25758
• http://www.ubuntu.com/usn/usn-525-1
• http://www.vupen.com/english/advisories/2007/3241Vendor Advisory
• https://bugs.gentoo.org/show_bug.cgi?id=192834
• https://bugzilla.redhat.com/show_bug.cgi?id=296221
• https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00344.html
• http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00002.html
• http://secunia.com/advisories/26921Vendor Advisory
• http://secunia.com/advisories/26932Vendor Advisory
• http://secunia.com/advisories/27018Vendor Advisory
• http://secunia.com/advisories/27071Vendor Advisory
• http://secunia.com/advisories/27100Vendor Advisory
• http://secunia.com/advisories/28265Vendor Advisory
• http://secunia.com/advisories/28412Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200710-04.xml
• http://www.debian.org/security/2007/dsa-1442
• http://www.mandriva.com/security/advisories?name=MDKSA-2007:191
• http://www.securityfocus.com/bid/25758
• http://www.ubuntu.com/usn/usn-525-1
• http://www.vupen.com/english/advisories/2007/3241Vendor Advisory
• https://bugs.gentoo.org/show_bug.cgi?id=192834
• https://bugzilla.redhat.com/show_bug.cgi?id=296221
• https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00344.html

Published

Sep 19, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-4967Online Armor Personal Firewall 2.0.1.215 does not properly v…
• CVE-2007-4968Privatefirewall 5.0.14.2 does not properly validate certain …
• CVE-2007-4969Process Monitor 1.22 does not properly validate certain para…
• CVE-2007-4970ProcessGuard 3.410 does not properly validate certain parame…
• CVE-2007-4971ProSecurity 1.40 Beta 2 does not properly validate certain p…
• CVE-2007-4972RegMon 7.04 does not properly validate certain parameters to…
• CVE-2007-4975Cross-site scripting (XSS) vulnerability in hilfe.php in b1g…
• CVE-2007-4976Directory traversal vulnerability in viewlog.php in Coppermi…
• CVE-2007-4977Cross-site scripting (XSS) vulnerability in mode.php in Copp…
• CVE-2007-4978Multiple PHP remote file inclusion vulnerabilities in phpSyn…
• CVE-2007-4979SQL injection vulnerability in index.php in the sondages mod…
• CVE-2007-4980The readRequest method in org/gcaldaemon/core/http/HTTPListe…