CVE-2008-1686

Published: Apr 8, 2008Modified: Apr 23, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Array index vulnerability in Speex 1.1.12 and earlier, as used in libfishsound 0.9.0 and earlier, including Illiminable DirectShow Filters and Annodex Plugins for Firefox, xine-lib before 1.1.12, and many other products, allows remote attackers to execute arbitrary code via a header structure containing a negative offset, which is used to dereference a function pointer.

Affected (40)

Products: Xine: Xine Lib · Xiph: Speex, Libfishsound

1 product

2 products

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Xine Xine Lib	Up to 1.1.11.1
Xine Xine Lib	Version 0.9.13
Xine Xine Lib	Version 0.9.8
Xine Xine Lib	Version 0.99
Xine Xine Lib	Version 1.0.1
Xine Xine Lib	Version 1.0.2
Xine Xine Lib	Version 1.0.3a
Xine Xine Lib	Version 1.0
Xine Xine Lib	Version 1.1.0
Xine Xine Lib	Version 1.1.10.1
Xine Xine Lib	Version 1.1.10
Xine Xine Lib	Version 1.1.11
Xine Xine Lib	Version 1.1.1

Configuration B

27 vulnerable

Vulnerable Software	Affected Versions
Xiph Speex	Up to 1.1.12
Xiph Speex	Version 1.0.2
Xiph Speex	Version 1.0.3
Xiph Speex	Version 1.0.4
Xiph Speex	Version 1.0.5
Xiph Speex	Version 1.1.10
Xiph Speex	Version 1.1.11.1
Xiph Speex	Version 1.1.11
Xiph Speex	Version 1.1.1
Xiph Speex	Version 1.1.2
Xiph Speex	Version 1.1.3
Xiph Speex	Version 1.1.4
Xiph Speex	Version 1.1.5
Xiph Speex	Version 1.1.6
Xiph Speex	Version 1.1.7
Xiph Speex	Version 1.1.8
Xiph Speex	Version 1.1.9
Xiph Libfishsound	Up to 0.9.0
Xiph Libfishsound	Version 0.5.41
Xiph Libfishsound	Version 0.5.42
Xiph Libfishsound	Version 0.6.0
Xiph Libfishsound	Version 0.6.1
Xiph Libfishsound	Version 0.6.2
Xiph Libfishsound	Version 0.6.3
Xiph Libfishsound	Version 0.7.0
Xiph Libfishsound	Version 0.8.0
Xiph Libfishsound	Version 0.8.1

Related CWEs

CWE-189

References (116)

http://blog.kfish.org/2008/04/release-libfishsound-091.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00001.html

Source: cve@mitre.org

http://lists.xiph.org/pipermail/speex-dev/2008-April/006636.html

Source: cve@mitre.org

http://secunia.com/advisories/29672

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/29727

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/29835

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/29845

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/29854

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/29866

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/29878

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/29880

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/29881

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/29882

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/29898

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/30104

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/30117

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/30119

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/30337

Source: cve@mitre.org

http://secunia.com/advisories/30353

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/30358

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/30581

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/30717

Source: cve@mitre.org

http://secunia.com/advisories/31393

Source: cve@mitre.org

Vendor Advisory

http://security.gentoo.org/glsa/glsa-200804-17.xml

Source: cve@mitre.org

http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.460836

Source: cve@mitre.org

http://sourceforge.net/project/shownotes.php?release_id=592185

Source: cve@mitre.org

http://sourceforge.net/project/shownotes.php?release_id=592185&group_id=9655

Source: cve@mitre.org

http://www.debian.org/security/2008/dsa-1584

Source: cve@mitre.org

Patch

http://www.debian.org/security/2008/dsa-1585

Source: cve@mitre.org

Patch

http://www.debian.org/security/2008/dsa-1586

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2008:092

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2008:093

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2008:094

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2008:124

Source: cve@mitre.org

http://www.metadecks.org/software/sweep/news.html

Source: cve@mitre.org

http://www.novell.com/linux/security/advisories/2008_13_sr.html

Source: cve@mitre.org

http://www.ocert.org/advisories/ocert-2008-004.html

Source: cve@mitre.org

http://www.ocert.org/advisories/ocert-2008-2.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2008-0235.html

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/491009/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/28665

Source: cve@mitre.org

Patch

http://www.securitytracker.com/id?1019875

Source: cve@mitre.org

http://www.ubuntu.com/usn/usn-611-1

Source: cve@mitre.org

http://www.ubuntu.com/usn/usn-611-2

Source: cve@mitre.org

http://www.ubuntu.com/usn/usn-611-3

Source: cve@mitre.org

http://www.ubuntu.com/usn/usn-635-1

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/1187/references

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/1228/references

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/1268/references

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/1269/references

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/1300/references

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/1301/references

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/1302/references

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/41684

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10026

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00244.html

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00287.html

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00357.html

Source: cve@mitre.org

http://blog.kfish.org/2008/04/release-libfishsound-091.html