CVE-2008-1419

Exploit

EPSS 4.25%
Veröffentlicht 16.05.2008 12:54:00
Zuletzt bearbeitet 16.06.2026 22:51:42
Erkennungen
Login

Xiph.org libvorbis 1.2.0 and earlier does not properly handle a zero value for codebook.dim, which allows remote attackers to cause a denial of service (crash or infinite loop) or trigger an integer overflow.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 28

NVD 6 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Xiph.Org ≫ Libvorbis Version 1.0.0

   Redhat ≫ Enterprise Linux Version 2.1 Edition as
   Redhat ≫ Enterprise Linux Version 2.1 Edition es
   Redhat ≫ Enterprise Linux Version 2.1 Edition ws
   Redhat ≫ Enterprise Linux Version 4.0
   Redhat ≫ Enterprise Linux Version 5 Edition client
   Redhat ≫ Enterprise Linux Version 5 Edition client_workstation
   Redhat ≫ Enterprise Linux Version 5.0
   Redhat ≫ Linux Advanced Workstation Version 2.1 Edition itanium

Xiph.Org ≫ Libvorbis Version 1.0.1

Xiph.Org ≫ Libvorbis Version 1.1.0

Xiph.Org ≫ Libvorbis Version 1.1.1

Xiph.Org ≫ Libvorbis Version 1.2.0

Xiph.Org ≫ Libvorbis Version 1.12

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	4.25%	0.898

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:N/A:P

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00001.html

Third Party Advisory

http://secunia.com/advisories/30581

Third Party Advisory

Permissions Required

http://secunia.com/advisories/30234

Third Party Advisory

Permissions Required

http://secunia.com/advisories/30237

Third Party Advisory

Permissions Required

http://secunia.com/advisories/30247

Third Party Advisory

Permissions Required

http://secunia.com/advisories/30259

Third Party Advisory

Permissions Required

http://secunia.com/advisories/30479

Third Party Advisory

Permissions Required

http://secunia.com/advisories/30820

Third Party Advisory

Permissions Required

http://secunia.com/advisories/32946

Third Party Advisory

Permissions Required

http://security.gentoo.org/glsa/glsa-200806-09.xml

Third Party Advisory

http://www.debian.org/security/2008/dsa-1591

Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2008:102

Broken Link

http://www.redhat.com/support/errata/RHSA-2008-0270.html

Not Applicable

http://www.redhat.com/support/errata/RHSA-2008-0271.html

Not Applicable

http://www.securityfocus.com/bid/29206

Third Party Advisory

VDB Entry

http://www.securitytracker.com/id?1020029

Third Party Advisory

VDB Entry

http://www.ubuntu.com/usn/USN-682-1

Third Party Advisory

http://www.vupen.com/english/advisories/2008/1510/references

Broken Link

https://bugzilla.redhat.com/show_bug.cgi?id=440700

Exploit

Issue Tracking

https://exchange.xforce.ibmcloud.com/vulnerabilities/42397

https://exchange.xforce.ibmcloud.com/vulnerabilities/42400

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10104

https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00243.html

Vendor Advisory

https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00247.html

Vendor Advisory

https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00256.html

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2008-1419

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2008-1419

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2008-1419

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2008-1419