Lucene search
FreeBSD7A7C5853-10A3-11DD-8EB8-00163E000016HistoryApr 06, 2008 - 12:00 a.m.
libxine -- array index vulnerability
2008-04-0600:00:00
vuxml.freebsd.org
20
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.068 Low
EPSS
Percentile
93.8%
xine Team reports:
A new xine-lib version is now available. This release contains a
security fix (an unchecked array index that could allows remote
attackers to execute arbitrary code via a header structure
containing a negative offset, which is used to dereference a
function pointer.)
References
Related
openvas
openvas
Gentoo Security Advisory GLSA 200804-17 (speex)
2008-09-24 00:00:00
Mandriva Update for gstreamer-plugins-good MDVSA-2008:092 (gstreamer-plugins-good)
2009-04-09 00:00:00
RedHat Update for speex RHSA-2008:0235-01
2009-03-06 00:00:00
nessus
nessus
SuSE 10 Security Update : Ogg Vorbis tools (ZYPP Patch Number 5302)
2011-01-27 00:00:00
Mandriva Linux Security Advisory : speex (MDVSA-2008:094)
2009-04-23 00:00:00
SuSE 10 Security Update : vorbis-tools (ZYPP Patch Number 5193)
2008-06-04 00:00:00
fedora
fedora
[SECURITY] Fedora 8 Update: libfishsound-0.9.1-1.fc8
2008-04-17 03:48:20
[SECURITY] Fedora 7 Update: speex-1.2-0.3.beta1
2008-04-17 03:56:54
[SECURITY] Fedora 8 Update: speex-1.2-0.4.beta2
2008-04-17 03:52:38
oraclelinux
oraclelinux
speex security update
2008-04-16 00:00:00
debian
debian
[SECURITY] [DSA 1585-1] New speex packages fix execution of arbitrary code
2008-05-21 18:15:15
[SECURITY] [DSA 1586-1] New xine-lib packages fix several vulnerabilities
2008-05-22 17:17:10
prion
prion
Null pointer dereference
2008-04-08 18:05:00
securityvulns
securityvulns
Speex / VLC / gstreamer-plugins-good / sweep / SDL_sound / vorbis-tools / Xine buffer overflow
2008-04-17 00:00:00
libfishsound library integer overflow
2008-05-22 00:00:00
[oCERT-2008-004] multiple speex implementations insufficient boundary checks
2008-04-17 00:00:00
redhat
redhat
(RHSA-2008:0235) Important: speex security update
2008-04-16 00:00:00
debiancve
debiancve
CVE-2008-1686
2008-04-08 18:05:00
centos
centos
speex security update
2008-04-20 14:10:28
slackware
slackware
[slackware-security] xine-lib
2008-04-22 01:47:04
ubuntu
ubuntu
Speex vulnerability
2008-05-08 00:00:00
GStreamer Good Plugins vulnerability
2008-05-08 00:00:00
vorbis-tools vulnerability
2008-05-08 00:00:00
seebug
seebug
FishSoundεΊθΏη¨Speex解η 代η ζ§θ‘ζΌζ΄
2008-04-13 00:00:00
ubuntucve
ubuntucve
CVE-2008-1686
2008-04-08 00:00:00
freebsd
freebsd
vorbis-tools -- Speex header processing vulnerability
2008-04-18 00:00:00
cve
cve
CVE-2008-1686
2008-04-08 18:05:00
gentoo
gentoo
Speex: User-assisted execution of arbitrary code
2008-04-17 00:00:00
osv
osv
xine-lib - multiple vulnerabilities
2008-05-22 00:00:00
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.068 Low
EPSS
Percentile
93.8%
Related for 7A7C5853-10A3-11DD-8EB8-00163E000016