CVE-2008-1686
- State
- Published
- Severity
- Not scored
- Published
- Apr 8, 2008
- Updated
- Aug 7, 2024
- Reserved
- Apr 6, 2008
Description
Array index vulnerability in Speex 1.1.12 and earlier, as used in libfishsound 0.9.0 and earlier, including Illiminable DirectShow Filters and Annodex Plugins for Firefox, xine-lib before 1.1.12, and many other products, allows remote attackers to execute arbitrary code via a header structure containing a negative offset, which is used to dereference a function pointer.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- USN-611-1vendor-advisory
- http://sourceforge.net/project/shownotes.php?release_id=592185
- 20080417 [oCERT-2008-004] multiple speex implementations insufficientboundary checksmailing-list
- ADV-2008-1302vdb-entry
- MDVSA-2008:124vendor-advisory
- 1019875vdb-entry
- 29878third-party-advisory
- 29898third-party-advisory
- FEDORA-2008-3103vendor-advisory
- ADV-2008-1269vdb-entry
- 29866third-party-advisory
- DSA-1586vendor-advisory
- 30117third-party-advisory
- [Speex-dev] 20080406 libfishsound 0.9.1 Releasemailing-list
- 30104third-party-advisory
- ADV-2008-1300vdb-entry
- 29727third-party-advisory
- ADV-2008-1301vdb-entry
- USN-611-3vendor-advisory
- 29672third-party-advisory
- SUSE-SR:2008:012vendor-advisory
- DSA-1585vendor-advisory
- MDVSA-2008:092vendor-advisory
- 30353third-party-advisory
- fishsound-libfishsound-speex-bo(41684)vdb-entry
- 29835third-party-advisory
- http://sourceforge.net/project/shownotes.php?release_id=592185&group_id=9655
- 29880third-party-advisory
- http://blog.kfish.org/2008/04/release-libfishsound-091.html
- 31393third-party-advisory
- oval:org.mitre.oval:def:10026vdb-entrysignature
- http://www.ocert.org/advisories/ocert-2008-2.html
- ADV-2008-1228vdb-entry
- DSA-1584vendor-advisory
- http://www.ocert.org/advisories/ocert-2008-004.html
- ADV-2008-1268vdb-entry
- 29845third-party-advisory
- USN-611-2vendor-advisory
- RHSA-2008:0235vendor-advisory
- 30358third-party-advisory
- 29854third-party-advisory
- SSA:2008-111-01vendor-advisory
- ADV-2008-1187vdb-entry
- MDVSA-2008:094vendor-advisory
- 29881third-party-advisory
- MDVSA-2008:093vendor-advisory
- GLSA-200804-17vendor-advisory
- 30119third-party-advisory
- 28665vdb-entry
- http://www.metadecks.org/software/sweep/news.html
- FEDORA-2008-3191vendor-advisory
- FEDORA-2008-3059vendor-advisory
- 29882third-party-advisory
- USN-635-1vendor-advisory
- 30337third-party-advisory
- 30581third-party-advisory
- SUSE-SR:2008:013vendor-advisory
- 30717third-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.