flac

• Author: kikadf
• Vulnerable: 1.2.1-3
• Unaffected: 1.2.1-4arcturus1

Michele Spagnuolo, of Google Security Team, and Miroslav Lichvar, of Red Hat, discovered two issues in flac, a library handling Free Lossless Audio Codec media: by providing a specially crafted FLAC file, an attacker could execute arbitrary code.

CVEs:

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8962
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9028