CVE-2008-1686 - Secunia

Blog

Careers

Secunia SmallBusiness

Products

Solutions

Customers

Partner

Resources

Company

Careers

Community

CVE Reference: CVE-2008-1686
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2008-1686

Description: Array index vulnerability in Speex 1.1.12 and earlier, as used in libfishsound 0.9.0 and earlier, including Illiminable DirectShow Filters and Annodex Plugins for Firefox, xine-lib before 1.1.12, and many other products, allows remote attackers to execute arbitrary code via a header structure containing a negative offset, which is used to dereference a function pointer.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/41684 UBUNTU http://www.ubuntu.com/usn/usn-635-1 http://www.ubuntu.com/usn/usn-611-3 http://www.ubuntu.com/usn/usn-611-1 http://www.ubuntu.com/usn/usn-611-2 SUSE http://www.novell.com/linux/security/advisories/2008_13_sr.html http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00001.html ST 1019875 SLACKWARE http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.460836 SAID Secunia Advisory: SA31393 Secunia Advisory: SA30717 Secunia Advisory: SA30581 Secunia Advisory: SA30358 Secunia Advisory: SA30353 Secunia Advisory: SA30119 Secunia Advisory: SA30117 Secunia Advisory: SA30104 Secunia Advisory: SA29898 Secunia Advisory: SA29882 Secunia Advisory: SA29881 Secunia Advisory: SA29880 Secunia Advisory: SA29878 Secunia Advisory: SA29866 Secunia Advisory: SA29854 Secunia Advisory: SA29845 Secunia Advisory: SA29835 Secunia Advisory: SA29672 Secunia Advisory: SA29727 Secunia Advisory: SA30337 REDHAT http://www.redhat.com/support/errata/RHSA-2008-0235.html OVAL http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10026 MLIST http://lists.xiph.org/pipermail/speex-dev/2008-April/006636.html MISC http://www.ocert.org/advisories/ocert-2008-2.html http://www.ocert.org/advisories/ocert-2008-004.html MANDRIVA http://www.mandriva.com/security/advisories?name=MDVSA-2008:124 http://www.mandriva.com/security/advisories?name=MDVSA-2008:094 http://www.mandriva.com/security/advisories?name=MDVSA-2008:093 http://www.mandriva.com/security/advisories?name=MDVSA-2008:092 GENTOO http://security.gentoo.org/glsa/glsa-200804-17.xml FEDORA DEBIAN http://www.debian.org/security/2008/dsa-1586 http://www.debian.org/security/2008/dsa-1584 http://www.debian.org/security/2008/dsa-1585 CONFIRM http://www.metadecks.org/software/sweep/news.html http://sourceforge.net/project/shownotes.php?release_id=592185 http://sourceforge.net/project/shownotes.php?release_id=592185&group_id=9655 http://blog.kfish.org/2008/04/release-libfishsound-091.html BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/491009/100/0/threaded BID 28665

Return to the previous page.

Products

Solutions

Customers

Partner

Resources

Company

Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)

Industry
Compliance
Technology
Integration

Customers
Testimonials

VARS
MSSP
Technology Partners
References

Factsheets
Reports
Webinars
Events

About us
Careers
Memberships
Newsroom

© 2002-2013 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability