eEye Digital Security has discovered 14 vulnerabilities in the processing of FLAC (Free-Lossless Audio Codec) files affecting various applications. Processing a malicious FLAC file within a vulnerable application could result in the execution of arbitrary code at the privileges of the application or the current user (depending on OS).
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/60989/EEYE-flac.txt
Source: https://packetstormsecurity.com/files/60989/EEYE-flac.txt.html