CVE-2008-1686 Integer overflow in n/a
Remote attackers can execute arbitrary code via a negative offset in Speex headers, affecting applications using the library.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2008-1686?
CVE-2008-1686 is a critical vulnerability in n/a, published on 8 Apr 2008. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Array index vulnerability in Speex 1.1.12 and earlier, as used in libfishsound 0.9.0 and earlier, including Illiminable DirectShow Filters and Annodex Plugins for Firefox, xine-lib before 1.1.12, and many other products, allows remote attackers to execute arbitrary code via a header structure containing a negative offset, which is used to dereference a function pointer.
Weakness: CWE-189
Which versions are affected by CVE-2008-1686?
It affects 3 products.
Linux distribution packages (21)
speex Red Hat:enterprise_linux:4::as | All versions | 0:1.0.4-4.el4_6.1 |
speex-debuginfo Red Hat:enterprise_linux:4::as | All versions | 0:1.0.4-4.el4_6.1 |
speex-devel Red Hat:enterprise_linux:4::as | All versions | 0:1.0.4-4.el4_6.1 |
speex Red Hat:enterprise_linux:4::desktop | All versions | 0:1.0.4-4.el4_6.1 |
speex-debuginfo Red Hat:enterprise_linux:4::desktop | All versions | 0:1.0.4-4.el4_6.1 |
speex-devel Red Hat:enterprise_linux:4::desktop | All versions | 0:1.0.4-4.el4_6.1 |
speex Red Hat:enterprise_linux:4::es | All versions | 0:1.0.4-4.el4_6.1 |
speex-debuginfo Red Hat:enterprise_linux:4::es | All versions | 0:1.0.4-4.el4_6.1 |
speex-devel Red Hat:enterprise_linux:4::es | All versions | 0:1.0.4-4.el4_6.1 |
speex Red Hat:enterprise_linux:4::ws | All versions | 0:1.0.4-4.el4_6.1 |
speex-debuginfo Red Hat:enterprise_linux:4::ws | All versions | 0:1.0.4-4.el4_6.1 |
speex-devel Red Hat:enterprise_linux:4::ws | All versions | 0:1.0.4-4.el4_6.1 |
speex Red Hat:enterprise_linux:5::client | All versions | 0:1.0.5-4.el5_1.1 |
speex-debuginfo Red Hat:enterprise_linux:5::client | All versions | 0:1.0.5-4.el5_1.1 |
speex Red Hat:enterprise_linux:5::client_workstation | All versions | 0:1.0.5-4.el5_1.1 |
speex-debuginfo Red Hat:enterprise_linux:5::client_workstation | All versions | 0:1.0.5-4.el5_1.1 |
speex-devel Red Hat:enterprise_linux:5::client_workstation | All versions | 0:1.0.5-4.el5_1.1 |
speex Red Hat:enterprise_linux:5::server | All versions | 0:1.0.5-4.el5_1.1 |
speex-debuginfo Red Hat:enterprise_linux:5::server | All versions | 0:1.0.5-4.el5_1.1 |
speex-devel Red Hat:enterprise_linux:5::server | All versions | 0:1.0.5-4.el5_1.1 |
vorbis-tools openSUSE:Tumbleweed | All versions | 1.4.2-1.6 |
Products include Xine Xine-Lib, Xiph Libfishsound, Xiph Speex.
How do I fix CVE-2008-1686?
Upgrade to a fixed version.
Is CVE-2008-1686 being exploited?
There is no known exploitation of CVE-2008-1686 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as DEBIAN-CVE-2008-1686, DSA-1584-1, DSA-1585-1, DTSA-127-1, DTSA-129-1, GHSA-8q5j-pq4c-9v79 and 3 more.