NVD

Id
1628  
Name
CVE-2008-1686  
Description
Array index vulnerability in Speex 1.1.12 and earlier, as used in libfishsound 0.9.0 and earlier, including Illiminable DirectShow Filters and Annodex Plugins for Firefox, xine-lib before 1.1.12, and many other products, allows remote attackers to execute arbitrary code via a header structure containing a negative offset, which is used to dereference a function pointer.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-04-08  
Modified Date
2011-05-19  
Seq
2008-1686  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
10567 1628 CVE-2008-1686 http://blog.kfish.org/2008/04/release-libfishsound-091.html  View
10568 1628 CVE-2008-1686 SUSE-SR:2008:012  View
10569 1628 CVE-2008-1686 [Speex-dev] 20080406 libfishsound 0.9.1 Release  View
10570 1628 CVE-2008-1686 oval:org.mitre.oval:def:10026  View
10571 1628 CVE-2008-1686 GLSA-200804-17  View
10572 1628 CVE-2008-1686 SSA:2008-111-01  View
10573 1628 CVE-2008-1686 http://sourceforge.net/project/shownotes.php?release_id=592185  View
10574 1628 CVE-2008-1686 http://sourceforge.net/project/shownotes.php?release_id=592185&group_id=9655  View
10575 1628 CVE-2008-1686 DSA-1584  View
10576 1628 CVE-2008-1686 DSA-1585  View
10577 1628 CVE-2008-1686 DSA-1586  View
10578 1628 CVE-2008-1686 MDVSA-2008:092  View
10579 1628 CVE-2008-1686 MDVSA-2008:093  View
10580 1628 CVE-2008-1686 MDVSA-2008:094  View
10581 1628 CVE-2008-1686 MDVSA-2008:124  View
10582 1628 CVE-2008-1686 http://www.metadecks.org/software/sweep/news.html  View
10583 1628 CVE-2008-1686 SUSE-SR:2008:013  View
10584 1628 CVE-2008-1686 http://www.ocert.org/advisories/ocert-2008-004.html  View
10585 1628 CVE-2008-1686 http://www.ocert.org/advisories/ocert-2008-2.html  View
10586 1628 CVE-2008-1686 RHSA-2008:0235  View
10587 1628 CVE-2008-1686 20080417 [oCERT-2008-004] multiple speex implementations insufficientboundary checks  View
10588 1628 CVE-2008-1686 28665  View
10589 1628 CVE-2008-1686 1019875  View
10590 1628 CVE-2008-1686 USN-611-1  View
10591 1628 CVE-2008-1686 USN-611-2  View
10592 1628 CVE-2008-1686 USN-611-3  View
10593 1628 CVE-2008-1686 USN-635-1  View
10594 1628 CVE-2008-1686 ADV-2008-1187  View
10595 1628 CVE-2008-1686 ADV-2008-1228  View
10596 1628 CVE-2008-1686 ADV-2008-1268  View
10597 1628 CVE-2008-1686 ADV-2008-1269  View
10598 1628 CVE-2008-1686 ADV-2008-1300  View
10599 1628 CVE-2008-1686 ADV-2008-1301  View
10600 1628 CVE-2008-1686 ADV-2008-1302  View
10601 1628 CVE-2008-1686 fishsound-libfishsound-speex-bo(41684)  View
10602 1628 CVE-2008-1686 FEDORA-2008-3059  View
10603 1628 CVE-2008-1686 FEDORA-2008-3103  View
10604 1628 CVE-2008-1686 FEDORA-2008-3191  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46005 JVNDB-2008-001315 Speex の配列インデックス処理における任意のコードを実行される脆弱性 Speex には、関数ポインタの参照で使用される負のオフセットを含むヘッダ構造体の処理に不備があり、任意のコードを実行される可能性があります。 CVE-2008-1686 31799 CVE-2008-1686 1628 6.8 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001315.html 2008-04-17 2008-05-09 View