CVE-2008-1419

Exploit

EPSS 4.25%
Veröffentlicht 16.05.2008 12:54:00
Zuletzt bearbeitet 16.06.2026 22:51:42
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Xiph.org libvorbis 1.2.0 and earlier does not properly handle a zero value for codebook.dim, which allows remote attackers to cause a denial of service (crash or infinite loop) or trigger an integer overflow.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 28

NVD 6 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Xiph.Org ≫ Libvorbis Version1.0.0

   Redhat ≫ Enterprise Linux Version2.1 Editionas
   Redhat ≫ Enterprise Linux Version2.1 Editiones
   Redhat ≫ Enterprise Linux Version2.1 Editionws
   Redhat ≫ Enterprise Linux Version4.0
   Redhat ≫ Enterprise Linux Version5 Editionclient
   Redhat ≫ Enterprise Linux Version5 Editionclient_workstation
   Redhat ≫ Enterprise Linux Version5.0
   Redhat ≫ Linux Advanced Workstation Version2.1 Editionitanium

Xiph.Org ≫ Libvorbis Version1.0.1

Xiph.Org ≫ Libvorbis Version1.1.0

Xiph.Org ≫ Libvorbis Version1.1.1

Xiph.Org ≫ Libvorbis Version1.2.0

Xiph.Org ≫ Libvorbis Version1.12

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	4.25%	0.898

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:N/A:P

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00001.html

Third Party Advisory

http://secunia.com/advisories/30581

Third Party Advisory

Permissions Required

http://secunia.com/advisories/30234

Third Party Advisory

Permissions Required

http://secunia.com/advisories/30237

Third Party Advisory

Permissions Required

http://secunia.com/advisories/30247

Third Party Advisory

Permissions Required

http://secunia.com/advisories/30259

Third Party Advisory

Permissions Required

http://secunia.com/advisories/30479

Third Party Advisory

Permissions Required

http://secunia.com/advisories/30820

Third Party Advisory

Permissions Required

http://secunia.com/advisories/32946

Third Party Advisory

Permissions Required

http://security.gentoo.org/glsa/glsa-200806-09.xml

Third Party Advisory

http://www.debian.org/security/2008/dsa-1591

Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2008:102

Broken Link

http://www.redhat.com/support/errata/RHSA-2008-0270.html

Not Applicable

http://www.redhat.com/support/errata/RHSA-2008-0271.html

Not Applicable

http://www.securityfocus.com/bid/29206

Third Party Advisory

VDB Entry

http://www.securitytracker.com/id?1020029

Third Party Advisory

VDB Entry

http://www.ubuntu.com/usn/USN-682-1

Third Party Advisory

http://www.vupen.com/english/advisories/2008/1510/references

Broken Link

https://bugzilla.redhat.com/show_bug.cgi?id=440700

Exploit

Issue Tracking

https://exchange.xforce.ibmcloud.com/vulnerabilities/42397

https://exchange.xforce.ibmcloud.com/vulnerabilities/42400

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10104

https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00243.html

Vendor Advisory

https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00247.html

Vendor Advisory

https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00256.html

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2008-1419

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2008-1419

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2008-1419

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2008-1419