CVE-2007-6278

HIGH · CVSS 9.3 EPSS 2.12%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2007-12-07 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2007-6278

Severity

HIGH

CVSS

9.3

EPSS

2.12%

Original NVD Description

Free Lossless Audio Codec (FLAC) libFLAC before 1.2.1 allows user-assisted remote attackers to force a client to download arbitrary files via the MIME-Type URL flag (-->) for the FLAC image file in a crafted .FLAC file.