Speex vulnerability

2008-05-0800:00:00

ubuntu.com

7.2 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.068 Low

EPSS

Percentile

93.8%

JSON

Releases

Ubuntu 8.04
Ubuntu 7.10
Ubuntu 7.04
Ubuntu 6.06

Packages

speex -

Details

It was discovered that Speex did not properly validate its input when
processing Speex file headers. If a user or automated system were
tricked into opening a specially crafted Speex file, an attacker could
create a denial of service in applications linked against Speex or
possibly execute arbitrary code as the user invoking the program.

OSVersionArchitecturePackageVersionFilename
Ubuntu8.04noarchlibspeex1< 1.1.12-3ubuntu0.8.04.1UNKNOWN
Ubuntu8.04noarchlibspeex-dev< 1.1.12-3ubuntu0.8.04.1UNKNOWN
Ubuntu8.04noarchspeex< 1.1.12-3ubuntu0.8.04.1UNKNOWN
Ubuntu7.10noarchlibspeex1< 1.1.12-3ubuntu0.7.10.1UNKNOWN
Ubuntu7.10noarchlibspeex-dev< 1.1.12-3ubuntu0.7.10.1UNKNOWN
Ubuntu7.10noarchspeex< 1.1.12-3ubuntu0.7.10.1UNKNOWN
Ubuntu7.04noarchlibspeex1< 1.1.12-3ubuntu0.7.04.1UNKNOWN
Ubuntu7.04noarchlibspeex-dev< 1.1.12-3ubuntu0.7.04.1UNKNOWN
Ubuntu7.04noarchspeex< 1.1.12-3ubuntu0.7.04.1UNKNOWN
Ubuntu6.06noarchlibspeex1< 1.1.11.1-1ubuntu0.3UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	8.04	noarch	libspeex1	< 1.1.12-3ubuntu0.8.04.1	UNKNOWN
Ubuntu	8.04	noarch	libspeex-dev	< 1.1.12-3ubuntu0.8.04.1	UNKNOWN
Ubuntu	8.04	noarch	speex	< 1.1.12-3ubuntu0.8.04.1	UNKNOWN
Ubuntu	7.10	noarch	libspeex1	< 1.1.12-3ubuntu0.7.10.1	UNKNOWN
Ubuntu	7.10	noarch	libspeex-dev	< 1.1.12-3ubuntu0.7.10.1	UNKNOWN
Ubuntu	7.10	noarch	speex	< 1.1.12-3ubuntu0.7.10.1	UNKNOWN
Ubuntu	7.04	noarch	libspeex1	< 1.1.12-3ubuntu0.7.04.1	UNKNOWN
Ubuntu	7.04	noarch	libspeex-dev	< 1.1.12-3ubuntu0.7.04.1	UNKNOWN
Ubuntu	7.04	noarch	speex	< 1.1.12-3ubuntu0.7.04.1	UNKNOWN
Ubuntu	6.06	noarch	libspeex1	< 1.1.11.1-1ubuntu0.3	UNKNOWN