CVE-2008-1686 PUBLISHED CVSS 9.300000190734863 CRITICAL

Array index vulnerability in Speex 1.1.12 and earlier, as used in libfishsound 0.9.0 and earlier, including Illiminable DirectShow Filters and Annodex Plugins for Firefox, xine-lib before 1.1.12, and many other products, allows remote attackers to execute arbitrary code via a header structure containing a negative offset, which is used to dereference a function pointer.

EPSS 5.25% · 89.9th percentile

Risk Scores

CVSS v2.0
9.300000190734863
EPSS Score
5.25%
89.9th percentile

Affected Products

VendorProductVersions
xinexine-lib1.0.2, 0, 0.9.8
xiphspeex1.1.7, 0, 1.0.2
n/an/an/a
xiphlibfishsound0.5.41, 0.5.42, 0.6.0

Timeline

References

…and 39 more

Open in Interactive Console →