CVE-2008-1686

CVE-2008-1686 is an array-index dereference vulnerability in the Speex library (and tied components like xine-lib) that allows a remote attacker to execute arbitrary code by processing crafted Speex headers containing a negative offset. The issue affects Speex 1.1.12 and earlier and is reported a...