CVE-2008-1686
Critical
Description
Array index vulnerability in Speex 1.1.12 and earlier, as used in libfishsound 0.9.0 and earlier, including Illiminable DirectShow Filters and Annodex Plugins for Firefox, xine-lib before 1.1.12, and many other products, allows remote attackers to execute arbitrary code via a header structure containing a negative offset, which is used to dereference a function pointer.
SeverityCritical
CVSS9.3
Exploit probability—
ProductXine-lib
PublishedApr 8, 2008
First seenApr 8, 2008
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| xine xine-lib | v ≤ 1.1.11.1, 0.9.8, 0.9.13, 0.99, 1.0, 1.0.1, 1.0.2, 1.0.3a, 1.1.0, 1.1.1, 1.1.10, 1.1.10.1, 1.1.11 | — |
| xiph speex | v ≤ 1.1.12, 1.0.2, 1.0.3, 1.0.4, 1.0.5, 1.1.1, 1.1.2, 1.1.3, 1.1.4, 1.1.5, 1.1.6, 1.1.7, 1.1.8, 1.1.9, 1.1.10, 1.1.11, 1.1.11.1 | — |
| xiph libfishsound | v ≤ 0.9.0, 0.5.41, 0.5.42, 0.6.0, 0.6.1, 0.6.2, 0.6.3, 0.7.0, 0.8.0, 0.8.1 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.