9.3

CVE-2008-1686

Array index vulnerability in Speex 1.1.12 and earlier, as used in libfishsound 0.9.0 and earlier, including Illiminable DirectShow Filters and Annodex Plugins for Firefox, xine-lib before 1.1.12, and many other products, allows remote attackers to execute arbitrary code via a header structure containing a negative offset, which is used to dereference a function pointer.

Data is provided by the National Vulnerability Database (NVD)
Xine ≫ Xine-lib Version <= 1.1.11.1
Xine ≫ Xine-lib Version0.9.8
Xine ≫ Xine-lib Version0.9.13
Xine ≫ Xine-lib Version0.99
Xine ≫ Xine-lib Version1.0
Xine ≫ Xine-lib Version1.0.1
Xine ≫ Xine-lib Version1.0.2
Xine ≫ Xine-lib Version1.0.3a
Xine ≫ Xine-lib Version1.1.0
Xine ≫ Xine-lib Version1.1.1
Xine ≫ Xine-lib Version1.1.10
Xine ≫ Xine-lib Version1.1.10.1
Xine ≫ Xine-lib Version1.1.11
Xiph ≫ Speex Version <= 1.1.12
Xiph ≫ Speex Version1.0.2
Xiph ≫ Speex Version1.0.3
Xiph ≫ Speex Version1.0.4
Xiph ≫ Speex Version1.0.5
Xiph ≫ Speex Version1.1.1
Xiph ≫ Speex Version1.1.2
Xiph ≫ Speex Version1.1.3
Xiph ≫ Speex Version1.1.4
Xiph ≫ Speex Version1.1.5
Xiph ≫ Speex Version1.1.6
Xiph ≫ Speex Version1.1.7
Xiph ≫ Speex Version1.1.8
Xiph ≫ Speex Version1.1.9
Xiph ≫ Speex Version1.1.10
Xiph ≫ Speex Version1.1.11
Xiph ≫ Speex Version1.1.11.1
Xiph ≫ Libfishsound Version <= 0.9.0
Xiph ≫ Libfishsound Version0.5.41
Xiph ≫ Libfishsound Version0.5.42
Xiph ≫ Libfishsound Version0.6.0
Xiph ≫ Libfishsound Version0.6.1
Xiph ≫ Libfishsound Version0.6.2
Xiph ≫ Libfishsound Version0.6.3
Xiph ≫ Libfishsound Version0.7.0
Xiph ≫ Libfishsound Version0.8.0
Xiph ≫ Libfishsound Version0.8.1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 5.25% 0.896
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C